Request updateAndBuild (preferred) or a new API that does the same to cover 2. below. Linked issues cover 1, but I thought I would all the information here. From BSP-1361 so it can be closed.

Here is what I believe the correct behavior for updateAndBuild and this should be and documented as such:

1. From configured trusted IP or, if blank, source control server - no authorization required on call
   1. if there are source changes then trigger build and return current message (this is the way it works now )
   2. if there are no source changes then no build is triggered and return informational message (not an error!!!) that there are no source changes and no build triggered (the change is to give the info message on the api)
2. From any other system require authorization
   1. if and only if successful do the same as above.
   2. If not authorized then return an error message