Changelog
What changed
New features and changes to the API and the dashboard, newest first.
The public site and the pledge checkout
Browse live campaigns, read a campaign's page and back a reward with your card.
- The home page is now a marketplace: live campaigns, the ones ending soon, and how a Ship pledge and a Build fund work.
- A new Discover page lists every campaign taking pledges, with filters for the mode and the order.
- Each campaign has its own page with the pitch, what happens to your money, the seller, the rewards and the backers.
- Backing a reward shows the full terms of the sale, saves your card with Stripe and charges nothing until the campaign's rules say so.
- A payment your card refused can now be paid again from My pledges.
Faster API keys, working analytics
An API call no longer waits for the key's last use to be written, and the analytics proxy is in place.
- A call with an API key answers without waiting for its last use to be recorded.
- With analytics turned on, the browser's events reach PostHog through the site's own /ingest path.
Security hardening
Team, billing, credit and API rules now hold on every path, including the ones that went around them.
- Invitations, new members and role changes follow your plan's seats and stop while an organization is suspended or being deleted. An expired invitation no longer takes a seat.
- A refunded or disputed credit pack gives its credits back in proportion, and a second subscription paid by mistake is cancelled.
- An Idempotency-Key reused for another kind of write is refused with 422, and an item rejected by moderation can no longer be changed.
- An account rejected after review loses its sessions, API keys and agent access at once.
- Attaching a file costs 1 credit, and each plan has a file storage limit: 100 MB on Free, 10 GB on Pro, 100 GB on Business.
- Only an owner can give a role that manages billing.
- Deleting an organization asks for its name and a sign-in from the last 10 minutes.
Faster API, dashboard and MCP server
Every signed-in call, API call and agent call waits on fewer database round trips.
- A dashboard call checks who is signed in with one query less, and a write checks the organization with one query instead of two.
- An API call reads its key and the person who made it at once, and an item is written with its charge and its audit entry together.
- The organization page and an agent's calls read less, and the agent no longer waits for its call to be logged.
Kill switches and a limit on sign-in
Sign-up, the contact form, billing, item writes and the MCP server can be paused without a deploy, and a sign-in no longer waits for ever on a provider.
- A paused feature answers 503 with a time to try again, and its page says so instead of failing.
- A paused sign-up also stops the accounts a magic link or a social sign-in would create.
- The sign-in gives up after 20 seconds when a provider does not answer.
First release
Sign-up, organizations, an API with keys, credits and billing, and an MCP server for AI agents.
- Accounts with email and password, magic links, social sign-in and two-factor authentication.
- Organizations with roles (owner, admin, developer, billing), invitations and an audit log.
- The items API under /v1, with keys scoped to items:read, items:write and mcp, cursor paging and idempotent writes.
- Plans and credit packs through Stripe Checkout and the customer portal, and a usage screen by day and by source.
- An MCP server with OAuth, so an AI agent can read and write items on a member's behalf.