Changelog
What changed, and when.
Customer-facing changes to the API, the console, and checkout, newest first.
- Security
Request signatures now cover the query string
Signed requests (v2) include the query string, so a captured request cannot be replayed with different parameters.
- Console
Console sign-in with an emailed code
Team members sign in to the admin console with a one-time code sent to their work email. Owner powers stay with owners.
- API
Webhook URLs to private addresses are refused
Registering a webhook that points at a private or loopback address now fails when you connect it, not later at delivery.
- Checkout
Your organization name is held during checkout
The short name you choose is reserved until the account is provisioned, so a second sign-up cannot take it mid-payment.
- API
Per-visitor limits use your visitor's address
Rate limits for end users count the visitor address your server forwards, not your server's own address.
- API
Free-account names are checked before they are offered
Only names the sponsoring account can actually create are suggested to the person.
- API
Person-first KYC is the default
A government ID and a selfie come first. A sponsored account is created only after approval. Email and phone codes are optional and separate.
- Console
Clearing an AML flag needs two people
AML cases follow a four-eyes rule: one person proposes, a second verified person approves, and the case closes in one step.
- API
Decisions name the policy version that made them
Tenant policy is versioned, so every decision records exactly which rules produced it.