Changelog

Updates

Shipping daily · Last entry MON AUG 03

MON AUG 03

Fixed

Fixed merging two accounts leaving the person who started the merge stranded — their in-flight session could die mid-merge with no explanation, and signing back in afterward with the merged-away email or phone quietly created a brand-new empty account instead of landing on the one they'd merged into, forcing a fresh identity check that could only fail. Signing in with a merged-away login now redirects you to the account you actually merged into
Fixed accounts created through a company's verification link or a teammate invite being dropped into the personal 'what do you want to do?' setup wizard — these accounts already know their starting point, so they now skip straight past it
Fixed public promo and giveaway codes showing as 'sold out' even with capacity left — a code claimed by someone whose identity check was ultimately rejected kept holding its slot forever. Slots held by claims that can never complete are now released back into the pool, and a previously rejected claimant can't immediately grab the freed slot back

FRI JUL 31

Fixed

Fixed the dashboard, public view, and agent surfaces showing an endless 'final approval in progress' spinner for people whose card application had actually been declined (for example, an unsupported region) — a declined application now shows a clear, final outcome with the reason instead of spinning forever
Fixed merging a duplicate account silently doing nothing: entering the verified account's phone number found no owner, so the transfer quietly degraded and the dashboard claimed 'verification is transferring' forever — linking now resolves the owner through verified identity and completes the merge, or routes you back with honest next steps

THU JUL 30

Fixed

Fixed wallet funding getting stuck in an endless 'try again' loop for some people once they passed a funding threshold that requires full identity documents — the documents from your identity check are now shared with the funding provider automatically, and if funding genuinely can't proceed you get a clear 'more identity info needed' response instead of a repeating error
Fixed a setup dead end where the 'Finish setup' banner sent you to the verify page but the User Agreements checklist only appeared inside the create-card dialog — you can now accept the agreements right on the verify page, so verified users (including giveaway claimants) can finish setup and release any held credit
Fixed already-verified cardholders getting stuck on a 'you're verified' screen with no way to submit a document the identity check later asked for (for example, a passport or ID number needed for international funding) — the verification flow now reopens so you can upload exactly what's requested

WED JUL 29

Added

Promo codes now travel end to end from a campaign link — open the app with a code in the link and it's applied automatically on your first visit to the dashboard, surviving sign-up along the way
Giveaway and promo codes handed out before you've verified can now hold their credit until your identity check passes: you redeem the code right away, the wallet shows an 'awaiting verification' note, and the credit lands automatically once you're verified
Companies that embed the 'attach your own card' link in their own interface can now request a chrome-free version of the hosted page that shows just the checkout, so it drops cleanly into an existing flow

Improved

The dashboard home banner now speaks to exactly where you are in setup — a fresh 'verify your identity' prompt, a short 'one step left' nudge when only the agreements remain, or a quiet 'verifying…' while review is in flight — and once you're verified with no cards yet, a new banner invites you to create your first card
Company card notifications (card created or closed, transactions, low balance) now respect each admin's own mute settings instead of emailing every owner and admin unconditionally
Sandbox now matches production for attach-your-own-card flows — test-mode card creation honors a connected card and rejects the same unsupported combinations production does, org 'card.created' webhooks now fire for sandbox connection mints, and the documented sandbox-only testing helpers work again
Behind the scenes, card issuance has moved onto a single, newer issuance path with the card issuer, consolidating several older paths into one — with no change to how your cards work

Fixed

Fixed the cards API silently turning a request for a multi-use card funded by your own attached card into a single-use card that then failed on its second charge — it now returns a clear, documented error up front so the request can be corrected
Fixed the attach-your-own-card flow showing an endless 'Try again' when a setup problem on our side blocked enrollment — it now shows a clear 'this is on our side' message instead

TUE JUL 28

Added

A texted 'wallet link' is quietly rolling out behind the scenes — off for everyone while it's still being finished: a customer's agent texts a link that opens a lightweight wallet, a native App Clip on iPhone or a hosted web page everywhere else, with no install and no separate account, where the customer can add their own card and see the cards their agent creates for them. The link carries no credentials, works only for a limited window, and stops working the moment the connection is revoked
Companies onboarded through a partner platform now land on a new free Lite plan — full production access with no subscription, capped at 200 live cardholders — with a clear upgrade path to the full Company plan shown right in billing

Improved

Embedded wallet funding is now much faster — top-ups that could take up to ~30 seconds while an identity review ran now typically finish in a couple of seconds
Funding a wallet now credits the exact amount you request — send the amount the customer should receive and that's what lands, with no need to gross it up
Agent clients can now discover the MCP server's available tools without credentials (rolling out), and expired or invalid credentials now come back with the standard 'refresh your token' signal instead of a generic challenge
Being added to a company on Agentcard — whether an admin sets up your account or a teammate invites you — now sends a designed invite email with a one-tap sign-in link and no password to remember
Attached-card lists now read the same everywhere, including the MCP tools — a clean issuer-and-nickname label instead of a raw network name — and stale, no-longer-usable attached-card entries stop piling up in your history

Fixed

Fixed fetching details for a card that's already closed returning a confusing, retryable error — closed cards (including one-time cards that auto-close after payment) now return a clear, final 'card closed' response so integrations stop retry-looping
Fixed the company wallet dashboard still showing 'attach your own card' as unavailable for company accounts even though it went generally available for every organization the week before — the tile now links straight to the setup guide
Fixed identity verification failing to start on the hosted flow because the cardholder's address wasn't being sent — the address is now included, and if it's genuinely missing you get a clear 'needs more info' response instead of a dead error
Fixed the MCP server rejecting valid tool requests sent without a JSON content-type header, which had been surfacing as spurious authentication failures for some agent clients
Fixed hosted onboarding hitting a company's cardholder cap with a generic error — it now shows a clear message naming the company, and the onboarding link works again once the plan is upgraded

MON JUL 27

Added

The newest wallet-funding rail is now the default for every user, not just the small group it had been rolling out to — completing a behind-the-scenes retirement of the older guest-checkout rail it was replacing. Funding no longer requires a US phone number or a one-time phone code at all; the only country restriction left is the standard restricted-countries list
Card issuance now requires accepting the card issuer's User Agreements at your first card creation — a short checklist whose contents depend on whether you're in the US or elsewhere, shown right after identity verification so it never blocks the identity check itself. It applies to everyone, including anyone who verified before this shipped, and agents and the CLI get a matching per-agreement confirmation step
Embedded funding on the newest wallet-funding rail can now boot the provider's native mobile SDK directly, so partner apps show a true native Apple Pay / Google Pay sheet instead of a webview — and it can also hand partners a fully pre-built, ready-to-embed wallet-button page instead of raw provider details to assemble themselves

Improved

Platform partners can now redeem a one-time connection code on its own, without also tracking which session it belongs to — one less piece of state they need to keep on their side

Fixed

Fixed a partner's embedded wallet view failing to load because its origin was missing from the embed's security allowlist

SUN JUL 26

Fixed

Fixed some 'Buy Me Anything' iMessage shoppers being blocked at checkout with a verification-required error even though their identity was already verified — card issuance and the checkout preflight now read the same verified identity the rest of the product was already showing

SAT JUL 25

Improved

The newest wallet-funding rail (still rolling out to a small group) now accepts international users — it verifies a passport or national ID instead of requiring a US-only identity check, and eligibility is now decided by the card issuer's actual restricted-country list instead of a blanket US-residents-only rule

Fixed

Fixed two brief windows where the MCP server returned errors on every request right after a deploy — a stale type-check exception and a runtime-incompatible library import both got fixed at the root cause
Fixed redeemed promo credits sometimes taking up to five minutes to become spendable — the balance now updates immediately once the on-chain deposit confirms instead of waiting on the backup sweep

FRI JUL 24

Added

The 'Buy Me Anything' iMessage experience now has a full wallet screen embedded right in the conversation — view your cards, attach your own card (a bank one-time code plus a Visa or Mastercard passkey), and see card details, all without leaving the chat
Partners can now onboard companies into Agentcard themselves and receive that company's org credentials through a one-time, OAuth-style code exchange — similar to how Stripe Connect onboards a merchant — instead of the company signing up separately and creating API keys by hand
A new partner-facing API is quietly rolling out behind the scenes, fully dark for now: it lets an approved partner platform create, view, and close cards, and attach a card, using a signed-in user's own access token instead of needing org-level credentials for every action
Attaching your own card now carries over automatically to every other organization you connect to afterward — approve the bank verification once, and each newly connected org can mint cards against that same card, no re-entry and no repeat bank ceremony
Signing in from the CLI now starts with a device code you approve in any browser — on your phone or your laptop — instead of typing in an emailed code; every device or sandbox gets its own session this way. The old emailed-code flow is still there as a fallback
The foundation for a new sign-in system for MCP connections is rolling out behind the scenes, fully flag-gated for now — new connections would authenticate through a dedicated identity provider instead of Agentcard's own homegrown login, with no visible change to how you connect today

Improved

Every mention of a 'magic link' across the CLI, docs, and the Agentcard skill has been swept and corrected — sign-in has used a device code or an emailed code for a while now — and the skill's tool table was reconciled to match the live set of MCP tools exactly
MCP tool descriptions were rewritten to state what a tool does as fact instead of issuing instructions from inside the description itself, every tool now carries complete safety annotations (read-only, destructive, and so on), and the MCP server's packaging was hardened so it builds and installs cleanly as a standalone package outside this repo
The organization dashboard's tables and status indicators got a clarity pass: status colors that hold up in dark mode, spending filters that filter the full result set instead of just the page you're looking at, exact timestamps on hover, and success confirmations that no longer rely on color alone

Fixed

Closed a batch of internal security gaps found in an audit: a sandbox test connection could no longer be confused with a live account, a revoked or expired connection can no longer authorize wallet actions, only an organization's owners can remove another owner, and the one-time approval links for revealing card details or creating a card can now each be used exactly once. Also locked down outbound webhook delivery against a DNS-rebinding attack and fixed a spot where inbound email content could be used to spoof messages in our support Slack channel
Removed an extra 'choose an organization' screen that could interrupt sign-in for members of more than one organization — which organizations you can act on is governed by Agentcard, not by the sign-in screen
Fixed a set of rare timing issues where two sign-ins or session refreshes happening at the same moment on one machine could corrupt a session or let a command run under the wrong account's credentials
Fixed the buy tool's delivery-address step rejecting valid Canadian postal codes, which had been silently blocking Canadian users from checking out
Fixed MCP tool calls failing with a confusing generic error when your session had actually expired — you're now prompted to reconnect right away instead of every call quietly failing the same way
Fixed two sources of intermittent server errors: a brief database connectivity blip and rate-limited wallet-balance checks under load are now retried automatically instead of failing your request
Fixed creating a production API key failing with a generic error when the sandbox key it was cloned from had no redirect URLs set

THU JUL 23

Added

Attaching your own card is now on for every organization by default — no waitlist required — and works with Mastercard as well as Visa (Mastercard attaches from any country; Visa still needs a US-issued card). Verifying your card no longer asks for a phone number at all — your signed-in email is enough — and companies connecting through their own agent session can attach a card the same way their users do
A fourth wallet-funding rail is quietly rolling out behind the scenes to a small group of users, fully dark for everyone else — like last week's new rail, it skips the phone-verification step and checks your identity inside its own hosted checkout
Organizations get a new Logs screen (Settings → Developers) listing every API request and webhook delivery across the org, and a pending-interchange estimate now shows up on the earnings page before a purchase clears
The CLI can now redeem a promo code and manage your approvals inbox from the terminal, asks which card or your balance to charge when it's genuinely unclear which one you meant, and agents get matching read-only tools for listing withdrawal recipients and pending approvals
Attached cards can now be viewed, marked as default, and removed right from the web dashboard, matching what the CLI and agent tools could already do

Improved

Card issuer names shown in the CLI and agent tools are cleaner and easier to read, cards now say whether they're funded by your balance or your own attached card, and the attach command's card list matches the look of the regular cards list
Agents can now discover gated tools like cancel_plan or update_settings from the tool they extend, and a mistyped tool name suggests the closest real one instead of just failing
The shared Slack-channel banner on an organization's dashboard home page can no longer be dismissed away

Fixed

Fixed a background-jobs bug that silently skipped critical scheduled work — funding reconciliation, withdrawals, ledger reconciliation — for about seven hours with no visible error
Fixed a rare case where a brief internal hiccup could bump an already-verified funding user onto a rail that needed extra verification, making the same funding request succeed and then fail minute to minute
Fixed a funding webview embedded in some partner apps that could spin forever, and fixed signed-out visitors to the web dashboard landing on a dead end instead of the sign-in screen
Fixed several attach-status bugs where two apps sharing one wallet could see contradictory or stale statuses for the same attached card
Fixed a connected (attach-your-own-card) card's details page showing your identity-verification address as if it were the card's billing address
Fixed the card-spending-limit tool rejecting a validly named parameter, and fixed rejected tool calls reporting themselves as successful

WED JUL 22

Added

Attaching your own card now supports more than one: keep several of your own Visa cards enrolled at once, pick which one a new virtual card charges, and see which is the default. Agents can list the enrolled cards and remove one on request, and removing a card closes any virtual cards minted against it so nothing keeps charging
Attach your own card from the terminal: a new attach command starts the enrollment (a one-time code from your bank plus a passkey, about a minute), resumes one you left pending, and can list, add, replace, or remove enrolled cards, no identity verification and no funding step required

Improved

Agents connecting to the MCP server now see a tighter default tool list: nine niche tools (one-off compliance steps, rare analytics views, settings writes) moved out of the default list so agents find the right tool faster. Everything stays callable, and the full catalog is one command away in the CLI's api namespace

TUE JUL 21

Added

Your cards from every app and company you're connected to can now appear together in one wallet view, each labeled with the app or company it came from. And when one app tries to act on a card another app created (revealing its details, closing or pausing it), nothing happens until you approve it from an emailed link; the agent simply retries once you have

Improved

The CLI's help now fits on one screen, with the full command board available behind a flag instead of scrolling past everything on every run
The instruction blocks that wire coding agents to the Agentcard tool catalog now refresh themselves whenever the CLI updates, so agents always steer by the current tools instead of a snapshot from install day

Fixed

Fixed the CLI's self-update getting permanently stuck on some machines: an over-eager version cache could pin the CLI to an old release forever; it now double-checks npm and unfreezes itself

MON JUL 20

Added

The two Agentcard CLIs are now one: agent-cards covers both personal cards and the companies product (a companies namespace inside the same tool), with a guided first run when you're new; the old agent-cards-admin package keeps working as a shim that forwards to agent-cards companies
A new api namespace in the CLI projects the entire MCP tool catalog through the shell, so coding agents and scripts can search, describe, and call every Agentcard tool without an MCP connection; a companion agents add command wires Claude Code, Codex, or Gemini to it by installing a steering block into their instruction files
Wallet now means your cards and balance means your cash, everywhere: the CLI's wallet command shows the cards you hold plus your balance, balance shows the cash that funds new cards (with new top-level fund and withdraw commands to move it), and the agent-facing tools were renamed to match, with the old names still accepted during a transition window
Signing in now spots look-alike accounts that belong to the same person and offers to link them, laying the groundwork for one shared wallet across everything you connect

Improved

The Chrome extension has been retired: everything it did lives in the CLI and the MCP server now, and its page redirects to the personal product

Fixed

Fixed the CLI's self-update refusing to run on machines with more than one npm installation; it now picks the right one and repairs itself
Signed-out runs of any command now open the sign-in flow inline instead of erroring with instructions to run a different command first, and JSON output stays valid JSON even when signed out

FRI JUL 17

Added

A new wallet-funding rail is quietly rolling out to a small group of users behind the scenes — unlike the existing options, it doesn't require the one-time phone verification code, and it can recognize a user's already-verified identity to skip re-verifying inside the funding page too; a few extra questions are collected conversationally through the agent only when the rail actually needs them
The foundation for attaching your own card keeps building out behind the scenes — the pages that walk through connecting a card and approving a purchase now run against a live identity-verification and approval process instead of a placeholder, and the underlying tool an agent would call to attach a card is wired up, still fully dark with no visible change to how you create or use cards today
The still-dark tokenback rewards program (see yesterday's entry) grew a dedicated rewards card that redeemed value lands on automatically — minted the first time you redeem, then topped up on every redemption after
New sign-ups through the personal web dashboard are paused for now — existing users can still sign in as usual, and anyone new is pointed to installing the CLI instead, which stays fully open

Improved

Dialogs and money-entry fields across the web dashboard got a visual pass — bigger, clearer amount inputs, smoother resizing when a dialog's content changes, taller form controls, and a redesigned wallet page for both individual and organization accounts

Fixed

Fixed the CLI's wallet fund command telling an unverified account to expect a verification code by email or text that was never actually sent, leaving the command stuck forever; it now sends the code and walks through verifying it the same way card creation does
Fixed identity-verification imports skipping older accounts with no nationality on file, even though their verified ID already recorded an issuing country — that document's country is now used as a fallback
Fixed the dashboard's test-card walkthrough dead-ending on a pending identity check instead of auto-approving it in sandbox, and identity verification results no longer requiring you to close and reopen the panel to show a freshly simulated outcome

THU JUL 16

Added

The building blocks for two new card types and a rewards program are now in place behind the scenes: multi-use cards that stay open across repeat charges instead of closing after one purchase, AI-lab-scoped cards that can only be spent at a locked set of merchants, and token-based rewards ("tokenback") that accrue on card spend and can be redeemed for AI-credit-style spending power — all still fully dark, with no visible change to how cards work today
The narrower, still-dark API surface for companies picked up a way to fund a user's wallet with a native Apple Pay sheet embedded directly in the company's own app, instead of only a hosted funding page
New sandbox tools let you test a full transaction lifecycle end to end — authorize-only holds, partial captures, voids, and refunds as their own webhook-firing steps — instead of only a single simulated charge; the dashboard's "issue a test card" flow now walks through the same steps with a live trail of what fired

Fixed

Fixed more edge cases in how a company's own money is told apart from its users' money when a company mints cards through its own connection — the connection that created a card couldn't always read that same card's details, balance, or transaction history right after creating it, and some spend could briefly post against the wrong ledger before a background sweep corrected it automatically
Fixed a gap where a sandbox identity-verification result could, in a narrow window, be mistaken for a live one and influence a real card decision — verification webhooks are now checked against which environment actually sent them before anything is applied

WED JUL 15

Added

Organizations and individual accounts can now withdraw funds to a bank account — by domestic transfer or international wire — instead of only cashing out through a crypto exchange or address; save a payout destination once, request a withdrawal, and our team wires it by hand and keeps you posted at each step
Withdrawing now happens through one consistent dialog with a rail picker instead of separate flows for each method — bank transfer up front, with the crypto-address option tucked under "other methods" — for both individual accounts and organizations. The international-wire form has a searchable country picker instead of a free-text field, and the organization wallet page now shows any withdrawal still in progress, with a way to cancel it, instead of just a balance that dropped with no explanation
New sandbox tools for testing identity verification end to end: an endpoint that instantly forces a chosen outcome (approved, rejected, needs more info) — the identity-verification counterpart to test payments — a matching test-mode version of the hosted verification page, and a way for organization admins to simulate an outcome for a sandbox user right from the dashboard, all firing the same webhook a real review would send
The foundation for attaching your own card instead of only using an Agentcard-issued one keeps building out behind the scenes — the logic that charges an attached card per purchase is now in place, still fully dark with no visible change to how you create or use cards today

Improved

Adding funds from an agent conversation is smoother when phone verification is required — the add_funds tool now sends the verification code itself and tells the agent exactly what to do with it, instead of expecting a separate step first

Fixed

Fixed a cluster of bugs affecting organization-connected accounts, where identity verification, wallet balance, and phone verification could be checked against a leftover personal record instead of the organization's own account — causing confusing splits like verification reading approved in one place and not verified in another, a funded wallet showing a $0 balance, or an on-file phone number appearing missing
Fixed a bug where sending funds directly to a wallet's deposit address, instead of funding through the usual flow, could leave the balance showing $0 on the dashboard even though the money had arrived; affected accounts have been corrected automatically

TUE JUL 14

Added

Organizations can now withdraw funds out of their company wallet — cash out to a bank account or send USDC directly to an address — from the dashboard or the API, using the same one-time-code confirmation as other sensitive wallet actions
Organization admins can now see full identity-verification detail for each cardholder right in the dashboard's Users drawer — the specific decision reason, checks performed, submitted documents, and whether a rejection matches the card issuer's restricted-countries list — instead of just a pass/fail status
The org dashboard's settings area has been reorganized: wallet balance and earnings now live on separate pages (money you hold vs. money you've earned), team, billing, revenue, card funding, credentials, and webhooks all moved under one Settings entrance, and billing can now be managed directly through a self-serve portal — payment method, invoices, cancellation — instead of contacting support
The foundation for letting you attach an existing card, instead of only using Agentcard-issued virtual cards, is rolling out behind the scenes — pure infrastructure for now, with no change to how you create or use cards today

Improved

The company plan now shows its full $5,000/month price plainly on the billing page, replacing the discounted $500 startup-price comparison
The narrower API surface for companies that only need to connect a user and verify their identity (still rolling out behind the scenes) now creates a wallet and records sign-in activity the same way a regular sign-in does, reaches a few more early users with a wallet-creation backfill fix, and returns a clear, retryable error when the identity-verification provider is temporarily unavailable instead of a generic failure

Fixed

Fixed the org billing page showing the generic list price for every organization — companies on legacy or negotiated pricing now see what they actually pay instead of the standard rate
Fixed a card-issuer webhook format change that silently prevented some approved cardholders' spending power from ever activating — affected accounts have been backfilled

MON JUL 13

Added

Organizations can now set their own markup — a percentage fee added on top of every checkout and wallet-funding transaction their integration drives — so companies earn revenue on their own terms, in addition to the card-interchange share already flowing into the company wallet. The fee is disclosed and priced into the total shown before checkout, and refunds automatically claw back the org's share proportionally
Companies can now design their own branded email for the "connect your account" flow — upload your logo and write your own message under Developer → OAuth, with a live preview that matches exactly what your users receive; the verification code is part of the design now, not something you need to reference in your copy
Ahead of retiring API keys in favor of OAuth client credentials everywhere, the dashboard's API playground — the last place that still handed out a test key — now provisions a client credential instead, and the infrastructure to sunset existing keys, with clear migration guidance and a grace period for teams still transitioning, is in place behind the scenes

Improved

The narrower API surface for companies that only need to connect a user and verify their identity (still rolling out behind the scenes) now also covers funding that user's wallet with Apple Pay or Google Pay from your own UI, and picked up a run of identity-verification fixes ahead of its public release
Dashboard tables — billing, team, transactions, and more — are now sortable and filterable, with a refreshed look in both light and dark mode

Fixed

Fixed identity verification dead-ending when a review came back needing a correction — you're now guided to fix the specific field or re-upload the right document instead of landing on a blank "almost there" screen with no way forward, and the verification page always renders in your own language
Fixed two separate ways a successful subscription payment could leave an account stuck on the free tier — a bug in our duplicate-checkout safeguard that silently ignored the very first activation, and a serverless timing issue that could cut post-payment setup short right after checkout succeeded; both are now also healed automatically by a recurring safety check if anything still slips through
Fixed signing in with GitHub for the first time dead-ending with a confusing "invalid code" error when your email needed verification — you're now walked through verifying it and land signed in, same as any other sign-in method
Fixed getting a production credential requiring an email to support — organization admins can now create and reveal their production OAuth client secret directly from the Credentials page, with no subscription needed just to get the credential itself

SUN JUL 12

Added

Organizations now automatically earn back a share of every transaction their cards make — credited into a company wallet that's created automatically for every organization once it goes live, and shown right on the wallet page alongside your balance and activity
A narrower API surface for companies that only need to connect a user and verify their identity is rolling out behind the scenes — it doesn't change how you integrate with Agentcard today, and everything transactional still goes through MCP as before

Improved

Funding a company wallet now also works with Apple Pay and Google Pay, not just a wallet transfer, and organizations can switch between user-funded and company-funded billing after creation — as long as no money has moved yet — instead of being locked into their original choice forever
The organization Users page now shows when a user's identity verification started, not just whether it finished, so you can follow up with people who started and never came back

Fixed

Fixed the organization wallet page showing balances and funding controls that didn't match how the org actually pays for cards — user-funded organizations no longer see company-wallet-only screens, and switching the dashboard's Live/Sandbox toggle no longer briefly shows the wrong mode's balance or deposit address

SAT JUL 11

Added

Signing in now supports your phone number as well as email, and if you sign in a different way than usual and it looks like you already have an account, you'll be offered to link the two together instead of ending up with separate accounts, balances, and cards
Behind the scenes, virtual cards are now issued by default through our current card-issuing platform in every environment — this has quietly been the case in production for a while, and now it's the standard everywhere; there's no change to how you create or use a card
The organization billing page now shows a startup discount when you haven't subscribed yet — a $500/month price alongside a crossed-out $5,000 comparison — with a matching green highlight on the "Go live" prompt in the sidebar

Improved

Setting up your integration with the `agent-cards-admin` wizard now provisions only a client ID and secret — no separate API key — and walks you through recovering from mistakes along the way (a bad directory, a mistyped sign-in code, switching accounts) instead of stopping the run; when it finishes, it also gives you the link to your new dashboard

Fixed

Fixed a dead end after subscribing an organization — paying customers landed on a page with no obvious next step instead of being guided straight to registering their production app
Fixed a bug where the dashboard could keep showing the onboarding flow to users who had already completed it — for example after signing out, on a new device, or in Safari — instead of remembering that you're done
Fixed company and organization connections being incorrectly told they were capped at the personal plan's $50-per-card limit — company-governed cards have never actually had that cap
Fixed identity verification for an organization's own cardholders sometimes completing without ever unlocking the card, and got a small number of previously-stuck verifications — ones that had never actually been started — moving again

FRI JUL 10

Added

The self-serve web dashboard is now live — manage your cards, wallet, activity, connections, and settings outside of chat, plus a full console for organizations covering team members, spending, API keys, webhooks, and billing; sign in with email, Google, or GitHub
Choosing how your organization funds cards — user-funded or from a company wallet — is now part of creating an organization in the dashboard, with a clearer picker in place of the old billing-email field
Setting up an organization now includes a ready-to-use credential from the start — a sandbox client ID and secret are created automatically when your org is created, so there's no separate step to mint a key. The dashboard's new "Implement Agentcard" page walks you through connecting your app, and you can now connect to your org's MCP server by pasting the client secret in directly instead of exchanging it for a token yourself

Improved

Live (non-sandbox) use of a company wallet now requires an active organization subscription, the same requirement as live API keys and OAuth clients; sandbox company-wallet usage stays free
Identity verification is more forgiving: a photo that can't be read is now caught the moment you pick it instead of failing later in the process, and when your card issuer denies an application for a reason other than your documents (for example, an unsupported region), you now see a clear, truthful explanation instead of a generic "verification did not pass" message
The organization's "Go live" page now shows the subscription price up front, instead of only revealing it after you click through to checkout
Signing in to order over iMessage no longer requires a one-time code — texting in now authenticates you automatically using your phone number

Fixed

Fixed a DoorDash bug where an order that failed a restaurant's own cart-total check (like a combo needing one more item to hit the required total) could be misread as a temporary glitch and retried blindly — minting and voiding a new card on every attempt and burning through your monthly card allowance in the process. It's now recognized immediately with clear guidance on what to fix, and failed attempts no longer count against your card limit
Fixed inviting an existing teammate to an organization silently adding them without any notification — invited teammates now get an email, and the team page shows a clear "invited" badge until they've signed in
Fixed a bug in the DoorDash ordering bridge where switching residential proxy providers could silently break per-request session pinning, causing checkout requests to rotate through different IPs mid-session instead of staying on one

THU JUL 09

Added

Organizations can now authenticate API requests with OAuth2 client credentials in addition to an API key
Organizations can now integrate with Agentcard over MCP alone — connect with your org's OAuth2 client-credentials bearer for a full set of tools covering cardholders, identity verification, cards, and the company wallet, instead of calling raw REST endpoints; the public REST reference for these endpoints has been retired in favor of the MCP docs
New MCP tools let an agent complete phone verification and fund a wallet entirely within the conversation — previously only the CLI, dashboard, and buy agent could get through that step, so an agent connected purely over MCP had no way past the funding gate
The org console now has a Live/Sandbox toggle, so you can switch between test and live views without leaving the dashboard

Improved

For organizations, sandbox and live are now fully separate worlds end to end — a cardholder, card, or transaction belongs to whichever key created it and stays invisible to the other mode, webhook endpoints only ever receive events from their own mode, and how cards get funded (each user's own wallet vs. a shared company wallet) is now a choice you make once when the organization is created rather than a setting you flip later
Setting up a company account is smoother — onboarding leads with what you're building and how cards should get funded, and the dashboard's organization home and company-wallet pages got a round of polish from early feedback

Fixed

Fixed a bug where some personal MCP connections kept minting test cards that can't actually be spent, even though personal accounts are meant to be live-only — every personal connection now always issues a real, spendable card
Fixed a timing issue where closing a company-funded card could leave its unused balance stuck instead of returning it to the organization's wallet, plus related edge cases — retrying a card request right after a hiccup could occasionally fund a card twice, and the company-wallet dashboard now refreshes on its own instead of needing a manual reload
Fixed a bug where an OAuth-connected app could occasionally resolve the wrong mode (sandbox vs. live) when creating or reading a card
Fixed a bug that could prevent signing in to the dashboard if you belonged to more than one organization

WED JUL 08

Added

Organizations can now fund a shared company wallet and issue cards directly from it, instead of requiring every end user to fund their own — you choose "user-funded" or "company wallet" once when your integration is set up
New `agent-cards-admin wallet` commands to view and manage your organization's company wallet from the terminal
Identity verification for organizations now happens natively inside the dashboard — take a photo of your ID and the form fills itself in, instead of being redirected to a separate hosted verification page; ID photos taken on an iPhone (HEIC format) are now accepted too
The org console now includes full webhook management — create, test, and inspect webhook endpoints right from the dashboard without needing an API key
The dashboard's onboarding flow is more guided — a wallet-first home screen and a short, step-by-step setup instead of upfront homework
Companies can now set up webhook endpoints and fire a test event to confirm a destination is wired up correctly before going live — deliveries are signed so you can verify they're genuine, and failed ones are retried automatically

Improved

The `agent-cards-admin` onboarding wizard is more reliable for coding agents — re-running it now reuses your existing credentials instead of failing, a stray comment in your `.env` file no longer breaks credential detection, and a new `--app-name` flag lets you name your integration up front
The `agent-cards` CLI now checks for and installs updates automatically before every command, instead of just nudging you to update it yourself
The dashboard has a refreshed visual design with light and dark themes

TUE JUL 07

Added

Started building a full self-serve web dashboard for managing your Agentcard account outside of chat — cards, wallet, activity, connections, and settings for individual accounts, plus a console for organizations to manage team members, spending, API keys, webhooks, and billing, with sign-in by email or your Google or GitHub account. It's not public yet, but the foundation is now in place
For organizations integrating directly via our API, cardholder identity verification now runs through the same verification pipeline used everywhere else in the product, and sandbox-mode verification is instant instead of needing a real provider
A new interactive playground inside the dashboard lets you try the full card lifecycle — create, fund, and close a sandbox card — without writing any code
In test mode you can now take a card through its entire life without any real money or outside setup — attach a payment method, verify identity, issue the card, reveal its number, run a charge that settles and fires the same events as production, and watch it auto-close after a single use

Improved

Inviting a teammate to your organization by email now works even if they don't already have an Agentcard account yet — previously that failed outright; now they get an invite and their first sign-in takes them straight into your organization

Fixed

Fixed a DoorDash bug where adding a second item to your cart could unexpectedly force a DoorDash account connection or fail outright — multiple items are now added in a single step so this can't happen

MON JUL 06

Fixed

Fixed a rare bug where a backend deploy could swallow an inbound text mid-conversation — it looked received but never got a reply. Deploys now hand off in-flight conversations cleanly instead of dropping them
Fixed a DoorDash bug where a run of guest-checkout hiccups could burn through several carts in under two minutes and dead-end in a forced login on a small first order — the agent now falls back to a single-item order instead of looping
Fixed automatic texts — cart reminders, scheduled order updates — sometimes silently failing to reach people who'd signed up with just a phone number and hadn't finished verification yet

SUN JUL 05

Added

You can now ask your agent for your promo code history — which codes you've used, which are still processing, and which failed attempts are worth retrying
Right after verifying your phone number, your agent will now offer to link it to an existing email-based Agentcard account so everything carries over instead of leaving you with two separate accounts
Started moving the shopping agent onto its own dedicated, always-on server behind the scenes — no change to how you shop today, but it's the foundation for noticeably faster replies

Improved

Replies from your agent come back noticeably faster — you'll see a read receipt and a quick "one sec..." if it needs a beat, and several behind-the-scenes checks that used to slow down every single reply no longer do
Ask what's actually included in a total and the shopping agent can now show the real breakdown — subtotal, delivery fee, service fee, tax — instead of just saying the fees are bundled in
When your identity verification finishes, your agent now tells you right in the conversation instead of leaving you to find out on your next message

Fixed

Fixed the shopping agent telling users there was no way to add funds when they were short on balance — it now offers the funding link directly
Fixed the shopping agent losing track of things it told you outside a normal reply (order updates, broadcasts) — it now remembers what it said when you reply to it
Fixed new sign-ups occasionally hitting a dead end on a brief connection hiccup during phone verification — it now quietly retries instead of telling you to try again later
Fixed wallet funding showing a generic "Could not start payment — please try again" when an account had actually hit a funding limit — it now explains the limit clearly, and daily limits say to try again tomorrow instead of inviting a retry that can't work
Fixed the agent sometimes repeating the exact same "sorry, I couldn't complete that" reply several times in a row after a brief hiccup
Scheduled orders now text you the outcome — placed, skipped, or failed — instead of leaving you to find out later
Fixed a DoorDash bug where an item requiring a choice (like a size) could get stuck bouncing back and forth forever — it now picks a sensible default and tells you what it picked
Fixed DoorDash delivery addresses with a building name or note (like "... at the ISEC building") failing to match — the agent now tries a few sensible variations automatically
Fixed the shopping agent claiming the Agentcard Pay browser extension doesn't exist
Fixed order confirmations occasionally quoting the pre-checkout estimate as the amount charged when the real charge came in slightly different — confirmations now wait for the real, settled amount
Fixed the agent insisting a blurry or unrelated photo was a valid ID after failing to read it — it now says plainly that it couldn't read the image
Fixed identity-verification guidance pointing people back to the website to "finish there" — the hosted verification link is the only place that ever happens
Fixed a bug where asking the agent to "surprise you" could occasionally spiral into a runaway loop of automatic purchase attempts behind the scenes, briefly slowing the shopping agent down for other users
Fixed two knock-on issues from that same hiccup — a brief connection blip no longer makes the agent wrongly conclude identity verification is unavailable, and repeated connection failures now end the conversation with an honest message instead of retrying forever

SAT JUL 04

Added

Ask your agent to "surprise me" and it'll buy you something small, fun, and genuinely surprising — capped at $10 by default, up to $25
DoorDash orders can now be picked up instead of delivered — just ask; delivery stays the default
If you build a cart over iMessage and go quiet, your agent now follows up with up to two short nudges before letting it go

Improved

DoorDash orders now default to your account's saved address and just confirm it with you, instead of asking you to enter one every time
Pricing always shows one combined 'service fees' line (platform fees, taxes, delivery, and ours) plus the real all-in total — cart, checkout, and order confirmations all agree on the same number now, and our fee is never quoted separately
Identity-verification reminders now arrive on whichever platform you actually use — iMessage first, email as a fallback — instead of skipping phone-first users entirely
Lists sent over iMessage (cart items, choices, options) now use a plain dash instead of a bullet character
Funding guidance no longer mentions sending USDC — wallet funding is Apple Pay / Google Pay only, and payment-method tools are now described accurately as being for flight bookings

Fixed

Fixed a bug where texting a photo of your ID could get lost entirely, with the agent wrongly claiming it can't receive images — ID photos are now received reliably and handed straight to identity verification
Fixed a bug where an ID photo sent mid-conversation wasn't submitted until your next message — sending the photo is now enough on its own
Fixed a loop that could leave someone in an unsupported country stuck, and made the identity-verification link more reliable
Fixed the shopping agent flatly refusing to reveal your card details
Fixed the shopping agent claiming it doesn't support promo or coupon codes — it now recognizes and redeems them mid-conversation
Closed a gap where an order could still ship to an old delivery address even after you'd confirmed a different one at checkout — the address is now re-verified right before the order is placed
Fixed a bug where the 'Buy Me Anything' concierge didn't realize your cart had carried over after connecting your account, and could ask you to re-add items you'd already added
Fixed a follow-on issue from yesterday's fix where restaurant items with a required choice (like a drink size) still couldn't be ordered properly — those items work as expected again
Fixed a bug where a scheduled DoorDash pickup order could reserve funds and mint a card for an order that was never actually going to be allowed to place
Fixed the second abandoned-cart reminder sometimes arriving too soon after the first
Fixed order confirmations quoting the price before fees instead of the amount actually charged to your card
Fixed a regression where the shopping agent temporarily lost the ability to answer general Agentcard questions, like billing or the Pay browser extension, mid-conversation
Fixed a short window where overlapping deploys could make the 'Buy Me Anything' iMessage line stop receiving messages entirely
Fixed a short window where the MCP server could fail every request right after a deploy

FRI JUL 03

Added

You can now redeem a promo code to add credit straight to your wallet — just ask your agent to redeem it
During identity verification over iMessage, you can now just send a photo of your ID right in the chat instead of using a separate upload link — Agentcard figures out the document type and country automatically, and the verification link now opens a phone-friendly screen
The 'Buy Me Anything' iMessage line can now do everything your agent can do on Agentcard — check your balance, review transactions, handle identity verification — not just shop
If you stop partway through identity verification, you'll now get a reminder email with a link to pick up right where you left off; the ID-number question also asks for the right thing based on your document's country (a Social Security Number only for US-issued IDs)

Improved

Funding your wallet now sends two texts: one confirming your money was received and is settling, then a second once it's actually credited and ready to spend — instead of one early text that arrived before the funds could actually be used
The shopping agent now always tells you what it's doing right before a longer step, like starting identity verification or looking up a menu, instead of sometimes going quiet for 10-20 seconds
Identity verification now skips a screen that asked you to re-confirm information you'd already given earlier in the conversation
Cards issued through a company's connected app, or by an organization, are no longer capped by the personal-plan card-count and per-card limits — only the company's own billing controls apply

Fixed

Fixed a security gap where a company's API key could, in some cases, reach an individual user's personal account — cards, wallet balance, and orders — instead of staying scoped to the company's own integration
Closed a gap where, if a certain legacy payment-webhook setting were ever left blank, a forged webhook request could have triggered a real refund or settlement
Fixed several cart bugs: adding items in quick succession could fork your order into duplicate carts, a cart that got silently reset could lose every item except the newest one, and some new guest sessions couldn't hold more than one item at all
Fixed a bug where ordering an item with a required choice (like a drink size) could get stuck looping forever instead of completing or clearly failing
Fixed a bug where switching from browsing as a guest to your real account mid-checkout could ship your order to an old saved address instead of the one you'd just chosen
Fixed a bug where a shopping request over iMessage that took a bit longer to complete could incorrectly tell you it failed, even though it finished successfully in the background
Fixed a bug where a routine deploy could cause the iMessage concierge to suddenly lose track of what you were just talking about mid-conversation
Fixed a bug where items added to your cart before connecting a merchant account could vanish once you connected, instead of carrying over
Fixed identity verification asking for your phone number again, even when you'd already verified it at sign-in
Fixed the shopping agent bringing up identity verification before you'd even said what you wanted to buy — it now only comes up once you're actually ready to check out
Fixed a bug where the link to add funds to your wallet could be silently invalidated by link-preview scanning before you had a chance to tap it
Fixed a same-day issue where approval-gated purchases were wrongly denied even after being approved
Fixed a bug where an end-customer of a connected company app could be wrongly asked to upgrade to a paid plan after their first order, even though the company — not the individual — pays for usage

THU JUL 02

Added

You can now sign in with just your phone number — a text with a one-time code — as an alternative to email, both when connecting your account to a company's app and in the 'Buy Me Anything' iMessage concierge, which verifies you this way before shopping on your behalf instead of quietly creating an account for you behind the scenes
A second, self-hosted option for identity verification is being built out behind the scenes, running invisibly alongside today's verification flow — groundwork for a more resilient identity check, with no change to how you verify today
Groundwork is being laid for Agentcard to open and manage a merchant account on your behalf automatically instead of asking you to connect one you already have — not turned on for anyone yet, but the foundation for shopping at more places without a manual connect step
Ask your agent for a full account snapshot — plan, subscription status, and identity verification progress — or a breakdown of your spending grouped by how it was paid (wallet balance, saved card, and more)
The company integration wizard (the `agent-cards-admin` CLI) can now run non-interactively, so a coding agent or CI pipeline can complete company onboarding end to end instead of needing a human at the keyboard
Behind the scenes, groundwork was laid to safely merge two accounts belonging to the same person (say, one made by email and one made by phone) into a single account — not available to anyone yet, but a step toward automatically resolving duplicate accounts

Improved

The 'Buy Me Anything' concierge now remembers your name and delivery address across visits, so a returning conversation can offer to ship to "your usual place" instead of asking you to repeat yourself
A brand-new 'Buy Me Anything' conversation now gets an instant reply while your account finishes setting up in the background, instead of waiting on setup before you hear anything

Fixed

Fixed an intermittent bug where a restaurant search could briefly return the wrong results, a cart item could fail to add right after a successful search, or a checkout could get stuck — browsing and checkout are reliable again
Fixed a bug where signing up with a different capitalization of the same email address (e.g. Name@example.com vs name@example.com) could create a second, duplicate account instead of reusing the existing one
Fixed a gap where a company's connected app (OAuth) could issue real, live-money cards even without an active paid subscription — brought in line with API keys, which already required one
A reply containing a table now renders as readable lines over iMessage instead of raw markdown table syntax
Fixed a same-day regression, caught before it spread, where flight booking and saved traveler profiles briefly stopped working in the buy agent following an internal engine update
Fixed a bug where a backend restart could make the 'Buy Me Anything' concierge lose track of cards it had created for you in an earlier session

WED JUL 01

Added

Identity verification now happens right inside the connect flow — after you link a merchant, you fill out a short identity form (with address autocomplete) and complete a photo ID check without leaving Agentcard, instead of being routed to a separate page to track down
The 'Buy Me Anything' concierge can now send and receive photos over iMessage — a team member can share a picture with you mid-conversation, and a photo you send back is visible to the team helping with your order
The buy agent can now describe a restaurant's full menu, organized by category with item descriptions, so a question like "what pizzas do you have?" gets an instant answer instead of a search

Improved

While your agent is working on something over iMessage, the "typing…" indicator now stays on for the whole turn instead of disappearing after its first reply
If a team member steps into your 'Buy Me Anything' conversation and then goes quiet, it now automatically hands back to the AI agent after a few hours instead of leaving you waiting indefinitely
There's now a single Agentcard API address — api.agentcard.sh — for both testing and live use; which mode you're in is decided by your API key (sk_test_ vs sk_live_), not by which URL you call

Fixed

Sending a photo with no caption in the 'Buy Me Anything' chat now gets a clear "tell me what you'd like" response instead of being silently treated as an order
Fixed a bug where an address lookup could fail with a false authorization error during checkout — this could show up as a misleading store-outage message, or leave a guest session stuck at the delivery-address step
Fixed a cart error on certain build-your-own items (e.g. picking a required topping) that could incorrectly appear as a site outage instead of asking you to complete the choice
Fixed a bug where a single-use card that closed automatically right after being spent could keep showing a small leftover balance instead of $0
Fixed a rare timing issue where issuing several cards for the same account at nearly the same moment could mint more cards than your available balance actually covered
Fixed a security issue where an organization admin could, in rare cases, remove or change the role of a member belonging to a different organization than their own
Hardened outbound webhook delivery against a security issue where a configured webhook URL could be pointed at internal network addresses
Fixed a bug where the shopping concierge over iMessage stopped replying to every message after an underlying AI model upgrade

TUE JUN 30

Added

Connecting your Agentcard account to a company's app now happens on its own dedicated site — a rebuilt connect and sign-in experience with a cleaner authorization screen that clearly shows which app is requesting access and what it can do before you approve it

Improved

Gift orders now default to letting the recipient enter their own delivery address by text, instead of requiring you to already know where they live; the recipient also now gets an SMS when their order is on the way
Checkout now gives a clear, actionable message when a scheduled delivery window fills up, instead of a generic error that made your agent keep retrying the same unavailable time slot
Adding a brand-new delivery address is now more reliable — a flaky first lookup while validating the address no longer fails the whole request

Fixed

Fixed an intermittent issue where a brand-new guest session could get stuck right at the delivery-address step; sessions are now verified as fully working before they're ever handed to you, so this class of dead-end can no longer happen

MON JUN 29

Added

Browse and build a cart before signing in — search restaurants, add items, and see your order build up as a guest, then connect your account only when you're ready to check out
The buy agent's replies now stream in as they're written instead of arriving in one burst at the end, so you see progress ("let me find that...") while it's still working instead of waiting for the whole turn to finish
Richer replies over iMessage — the buy agent can react with a tapback to a quick "yes," send a celebration effect when your order is confirmed, and (in limited testing) offer a native poll for simple choices
B2B companies can now onboard cardholders who only have an email on file, with no phone number required
The buy agent can now check your wallet balance directly, so it can tell you whether a top-up has landed instead of leaving you guessing
You'll now get a text the moment a wallet top-up finishes landing, instead of having to ask
After paying to fund your wallet, you now see a clear "payment complete" confirmation screen

Improved

Buy conversations now remember what your agent already looked up across messages, instead of re-searching and re-adding the same items on every follow-up — this also fixes a case where a scheduled order could loop endlessly asking you to confirm
Hitting your monthly card limit during checkout now gives a clear, plan-aware explanation and a way to upgrade on the spot, instead of a confusing message that could tell you to upgrade to the plan you're already on
Identity verification pages now open with your real name left blank instead of a placeholder like "iMessage User" — since the page requires your legal name to match your ID, a stray placeholder could otherwise cause verification to fail
Identity verification now asks for and prefills your real email and phone number where we have them, instead of a synthesized placeholder address, so the hosted verification page starts filled in correctly
A clearer message now appears if your identity verification is rejected because you already verified through Agentcard elsewhere, instead of a generic dead-end pointing you back to the website
Buy agent replies sent one line at a time over iMessage now read like natural status updates ("one sec, pulling up your addresses...") instead of sometimes sounding like a question that's about to be answered by the next line

SUN JUN 28

Added

The CLI `buy` command now runs a full local AI agent — it connects directly to your Agentcard MCP server and exposes every tool (shopping, wallet, cards, KYC, connections, support) to the model, so you can shop, fund your wallet, check balances, and manage your account all in one conversational session without a separate MCP host
The buy agent can now fund your wallet on the spot when an order comes up short — if checkout is declined because you need more USDC, the agent opens a hosted funding session (Apple Pay / Google Pay) and walks you through phone verification if it is your first time, rather than stopping with a dead-end message
Shop for anything over iMessage — text the 'Buy Me Anything' number with what you want and an AI concierge handles the conversation, gathers your order details, and routes it for fulfillment; a Stripe payment link is sent to you once your order is ready to charge

Improved

In-flight deposits are now visible while funds are still confirming — right after you fund, there is a brief window where money has left your funding source but has not yet landed in your balance; the balance view, `get_balance`, and the CLI now show the in-transit amount as 'confirming' so your balance looks right throughout the transfer instead of dropping to zero
Saved delivery addresses in the buy chat are now shown in pages — the first 3 appear immediately and the rest are available on request, keeping the conversation readable when you have many addresses on file
The buy chat now keeps your cart, address, and order state across the full session — previously each message could lose track of what was already in your cart or re-ask for an address you had already set; the conversation is now threaded end to end so nothing gets repeated
Buy chat output is now clean plain text — tool names are hidden, internal markers are stripped, and the model no longer wraps text in Markdown asterisks that appear as raw symbols in the terminal

Fixed

Card issuance now checks your true available balance before approving — previously, funds already reserved by your other open cards were counted as available, so a $30 wallet with a live $10 card could still mint another $30 card; Agentcard now subtracts those reserved amounts first and shows you the correct net figure
The verification code is now described as an email everywhere — the code is delivered by email, but the CLI prompt and OTP email subject were saying it was sent to your phone; messaging across the verification email, CLI flow, and funding-gate prompts now correctly names email as the delivery channel

SAT JUN 27

Added

Agentcard now runs on a rebuilt card-issuing rail — we re-platformed the entire issuing stack end to end, with embedded wallets you fund directly, a faster identity check, and a clean one-time cutover that carries your existing cards across automatically. It's the foundation for real wallet funding and broader card coverage, and it rolls out behind the scenes with no change to how you create or use cards today

Improved

The wallet and account view now shows your true spending power alongside incoming deposits — wallet funding movements appear as green credits in the transaction list, so you can see money in as well as money out
The `buy` tool now checks out correctly for wallet-funded accounts — the checkout flow was routing card creation through a path that didn't know about the current issuer, causing failures at the payment step; all buy checkouts now go through a single issuer-aware minter
Cards minted during a `buy` checkout are now attributed to the OAuth connection that created them — previously they were left with no owner, which caused `close_card` and `list_cards` to 404 on cards you had just minted via the buy flow

Fixed

The CLI no longer declares KYC rejected while you are still working through the verification page — statuses like `requires_input` are now treated as in-progress and polling continues until a real verdict arrives
Your card list no longer shows sandbox or test cards when you are in production mode — cards are now filtered to match the mode of the caller
Orders are now confirmed as fully placed before being reported as successful — we verify the order actually landed in your account, so a placement that's silently dropped is caught and surfaced as a failure rather than a phantom success
A `buy` checkout order that placed but was never charged no longer holds your wallet balance indefinitely — the reconciliation job now cross-checks against the payment ledger and releases the reservation when no charge is found

FRI JUN 26

Added

Send an order as a gift — tell your agent a recipient's name and phone number and the order is delivered to them (or sent as a link so they enter their own address)
Locale meal subscriptions are now available in the `buy` tool — connect once and your agent can browse the menu, manage your subscription, and pause or cancel it
B2B cardholders can now complete identity verification through your application — Agentcard starts a Stripe Identity session scoped to the individual, and card issuance on live keys is only unlocked once the end user has verified
The `buy` tool now covers the full shopping lifecycle: unlink a merchant, track an order, set item substitution preferences, manage a monthly budget, and skip or unskip upcoming subscription deliveries — all conversationally
Seven new MCP tools bring the consumer MCP server to full CLI parity: `start_kyc`, `get_kyc_status`, `get_settings`, `update_settings`, `revoke_connection`, `buy_connect`, and `buy_connect_status`
The `buy` tool now handles onboarding inline — if a B2B end user is missing KYC or a payment method, the tool returns direct links to complete each step without any extra calls from your application
KYC is now enforced in sandbox mode using Stripe Identity's test mode — sandbox (`sk_test_`) integrations go through the same verification flow as production, with test-mode sessions that can never satisfy a live issuance check and vice versa

Improved

The `wizard` command now handles full onboarding in one pass — it signs up or logs in, creates your organization, mints a confidential OAuth client, and writes the client secret and sandbox API key directly into your app's env file, never into the LLM prompt
Flight bookings no longer need a separate connect step — the flights merchant is linked automatically to your account the moment you ask to search or book
The `wizard` command now registers every Agentcard MCP tool in your integration dynamically instead of a fixed subset — tools added in future releases are picked up automatically with no code changes on your side

Fixed

Identity verification now shows the exact reason a document was rejected (e.g. 'the document is invalid') instead of a generic photo hint, and suggests trying a different ID type
Address selection no longer gets stuck in a retry loop when the agent refers to an address by its position in the list instead of its id — the position is now resolved to the correct saved address automatically

THU JUN 25

Added

Cancel a booked flight and get a refund — your agent can quote the refund amount before cancelling, then issue it back to your original payment method; non-refundable fares are handled cleanly
Confidential OAuth clients — `agent-cards-admin` now issues a `client_secret` by default when you create an OAuth client, so your server-side app authenticates the token exchange instead of relying on PKCE alone
Subscription gate on card issuance — paid-plan accounts with a lapsed or cancelled subscription are now blocked from issuing new cards immediately, with a direct link to reactivate; free-plan and test-mode accounts are unaffected

Improved

The `agent-cards-admin wizard` command now shows a live progress UI as the integration agent works through your codebase
Multi-turn buy conversations are faster and more reliable — the agent carries resolved store, item, and option ids across turns instead of re-deriving them on every message, eliminating a loop that could trigger ~12 redundant calls per customization

Fixed

Identity verification webhooks no longer get orphaned — previous retries created new verification sessions and overwrote the stored session id, silently dropping completed webhooks and stranding users at 'KYC required' indefinitely; ~98 accounts unblocked
Good Eggs delivery windows are parsed correctly again after a site update changed the page structure — closed time slots are also filtered out so only bookable windows appear
Declining a checkout no longer erroneously consumes a free-order quota — the free slot is returned if the card mint step fails
A `do_not_honor` decline is now correctly attributed to the card issuer rather than Stripe's fraud system, so the error message points you in the right direction
Cart items whose ids differ between search results and the live cart are now resolved by name — previously these mismatches caused item-not-found errors when modifying a cart
OAuth clients that don't send an RFC 8707 resource indicator no longer get a 500 at token exchange — the missing field is now accepted, unblocking some MCP clients

WED JUN 24

Added

New Slack app for shopping — install the Agentcard Buy bot to your Slack workspace and DM it in plain language to place orders directly from Slack

Improved

The buy flow checks payment readiness before you build a cart — if your account is missing KYC, a phone number, or a payment method, your agent tells you upfront with every missing step and how to fix each one, instead of failing at checkout
Restaurant search now picks the right location when a store name matches multiple categories — results are filtered to the correct type (e.g. food vs. pharmacy) before presenting options

Fixed

Checkout now sizes the card with a small buffer over the confirmed cart total, preventing declines when the final charge runs slightly over the pre-checkout estimate
Connecting a merchant account with a non-US phone number no longer gets stuck — the country code is selected correctly for any supported country
B2B API calls that send explicit `null` on optional body fields no longer return a validation error

MON JUN 22

Added

Book flights end to end — tell your agent where and when you want to fly and it searches real flights, confirms the fare, and pays from your Agentcard balance, no separate login or connect step required
Save a traveler profile so flight bookings reuse your details instead of re-asking every time
Good Eggs is now a first-class merchant in the `buy` tool — order groceries the same conversational way as any other store, with its own address and scheduling flow
New `list_all_transactions` tool (MCP + CLI) returns every transaction across all your cards in one list, each row tagged with the card it belongs to
The Agentcard Pay Chrome extension can now reveal a card's full number, expiry, and CVC on demand from the cards list, and the post-creation screen adds See card and Fill card buttons

Improved

Consumer test mode has been removed — every card you create is now a live, real-money card funded by your saved payment method, with no mode toggle to manage

Fixed

Connecting to an MCP client is more reliable — expired or rotated tokens now return a clean re-authentication signal instead of failing, so clients stop retry-storming
Editing the quantity of a customized item in a cart (e.g. a build-your-own order) now works correctly instead of erroring
Removed a false "something went wrong" error that could appear after a successful merchant connection

SAT JUN 20

Fixed

Identity verification no longer hangs — if a verification doesn't pass, your agent now tells you it failed and how to retry instead of waiting indefinitely

FRI JUN 19

Added

Watch a live demo: an AI agent placing a real food-delivery order from Claude, with the checkout paid by an Agentcard virtual card — a real order completed end to end

THU JUN 18

Added

Connect a merchant through a hosted, Plaid-style login — you sign in to the store in a secure browser view and Agentcard seals the session for your agent, with a mobile-friendly login form
Free-plan accounts now get one free real order to try AgentCard end-to-end — after that, browsing stays open and a clear upgrade prompt appears when you go to order; paid plans are unlimited and test mode is never gated

Improved

Beta and waitlist wording has been removed from user-facing messaging — AgentCard is generally available
Clearer errors when finishing a connect flow fails, with a tighter timeout so a stuck connection surfaces quickly instead of hanging

WED JUN 17

Added

New conversational `buy` tool — tell your agent what to order in plain language ("order a caesar salad from Zuni") and it runs the whole flow: finds the store, builds the cart, asks for your delivery address, and confirms the total before checkout. Available over MCP, in the CLI (`agent-cards buy`), and via a short connect link
New Pro plan at $100/mo — 50 cards per month with up to $1,000 per card — selectable from the CLI, MCP, and dashboard
Order tracking — check the status and ETA of a placed order
Scheduled delivery — pick a delivery time at checkout instead of ordering for right now
Set a default delivery address and per-item substitution preferences so reorders and checkouts use your saved choices
Tip your delivery driver directly at checkout

Improved

Checkout is more reliable — orders use a stable idempotency key and are uniquely scoped per client, so a retry can never accidentally place a duplicate order
Carts self-heal — if a store drops a line item or a cart goes stale, AgentCard rebuilds it from the live cart instead of failing, including duplicate reorder lines and quantity edits

Fixed

Your agent can no longer fabricate an order-placement or order-status claim — it only reports an order as placed once checkout actually succeeds
Fixed a connect loop that could leave the merchant-connection flow stuck

TUE JUN 16

Improved

Cards created for a purchase are now sized to the exact order total, including the pinned tip, so the charge always goes through cleanly
Documentation, the API integration guide, and CLI help were overhauled to fix points where agents previously got stuck setting up and using AgentCard

Fixed

Hardened the purchase money-path — idempotency, ledger accuracy, spend policy, and cart handling fixes prevent a charge from being double-counted or wrongly reversed, with a reconciliation safety net that confirms each charge and repairs any pending state
OAuth sign-in now works correctly for more MCP clients — discovery is fixed and the authorization step is properly separated, so connecting from clients like Kilo no longer fails

MON JUN 15

Added

You can now link external service accounts to AgentCard over OAuth — each connected account gets its own isolated card, so spending and limits never bleed across the agents and services you've connected, and known clients are recognized automatically

Improved

The OAuth consent and magic-link sign-in screens now show the actual app requesting access instead of always saying "Claude", so you can see exactly which client you're authorizing

Fixed

Refunds now go back to your original funding card instead of being stranded — a refund that previously landed in the wrong place is returned to the source it was paid from
Company onboarding is more reliable — the email action button is no longer blocked from opening, and onboarding-completion webhooks are no longer dropped when a delivery has to be retried
The CLI now retries transient network errors while waiting on a result instead of giving up, so a brief connection blip no longer aborts the command

SUN JUN 14

Added

New CLI command `agent-cards cards close <id>` to close a specific card directly from the terminal
New CLI commands `agent-cards payment-method list` and `agent-cards payment-method default` to view your funding methods and choose which one is used by default

Improved

The MCP server now matches the API and CLI feature-for-feature — switching between test and live mode, listing and defaulting payment methods, and cancelling a plan are all available to agents over MCP
The CLI `mode` command is now listed in `--help` and no longer prints a misleading beta notice

THU JUN 11

Fixed

Slack Connect channel setup for new company accounts is now resilient to Slack rate limits — invites are paced and retried instead of being silently lost, and re-running setup reuses the existing channel rather than failing or sending a duplicate invite

WED JUN 10

Improved

All transactional emails redesigned to the dark agentcard.sh brand — magic links, approval requests, card and transaction notifications, billing emails, and onboarding sequences now share one consistent look
Every standalone browser page — auth verification, OAuth success, approvals, funding, identity verification, and subscription pages — now matches the dark agentcard.sh design instead of using bare HTML

TUE JUN 09

Added

New company accounts now get a shared Slack Connect channel with the AgentCard team, created automatically when the organization is set up — the founders join and your billing contact is invited
Company accounts now receive an onboarding email from the founder when the organization is created — the team counterpart of the welcome email individual users already get

MON JUN 08

Added

Card creation now sends a confirmation email — just like transactions and card closures — whenever a card is created via the API, CLI, MCP, or dashboard; you can opt out per account in your notification settings

Improved

Test mode is now called "test mode" everywhere — CLI banners and docs no longer say "sandbox", making it clearer that new accounts start in test mode and go live with `agent-cards mode prod`

Fixed

Single-use cards now close the moment they're charged, so a follow-up charge is no longer wrongly declined as "card closed" while the card still showed as open
Closing a card after a purchase no longer occasionally fails — an already-closed card is now treated as a successful close
A declined charge caused by card-network fraud throttling no longer removes your funding card, and the decline message now suggests paying with Apple Pay or Google Pay instead

SUN JUN 07

Improved

`agent-cards-admin keys list` now shows each API key's age and flags keys overdue for rotation, with a reminder to rotate stale ones

Fixed

Production API keys are no longer revoked without warning — orgs now get an email when a subscription goes past due (keys keep working through the billing grace period) and a notice if keys are eventually revoked
Rotating an API key now keeps the old key valid for 24 hours, so in-flight requests using the previous key don't fail the instant you rotate
Revoking or rotating an API key now only affects keys that belong to your own organization

SAT JUN 06

Improved

The MCP server and CLI welcome screen now tell you that new accounts start in test mode and show the exact `agent-cards mode prod` command to switch to live
Sign-ups using disposable email addresses are now blocked, and repeated sign-up attempts from the same IP are rate-limited

FRI JUN 05

Added

New users now receive a welcome email from the founder the first time they verify their magic link and sign in

THU JUN 04

Added

`get_plan` and `upgrade_plan` MCP tools — agents can now read your current plan, card limits, and monthly usage, and kick off a Stripe Checkout upgrade to Basic directly from a conversation

Improved

`create_card` is now plan-aware — when you hit a card limit, the error message points the agent at `get_plan` and `upgrade_plan` instead of showing a generic limit message

Fixed

Database connections are now automatically refreshed when AWS rotates RDS credentials — long-running Vercel instances that previously produced 503 errors after a rotation now recover on their own without a redeploy

WED JUN 03

Improved

Blog refreshed and restyled across all posts
About page updated with black-and-white portraits of our angel investors and founders
Agent-discovery metadata refreshed — agent.txt, llms.txt, and the .well-known endpoints (agent-card, agent-skills, API catalog, and MCP server card) now reflect current capabilities

SAT MAY 30

Fixed

Webhook auto-disable now measures the 7-day failure window from the start of the current failure streak — not the endpoint's age — so a long-idle endpoint is no longer disabled on its first failed delivery, and the clock resets the moment a delivery succeeds

THU MAY 28

Improved

Admin dashboard now shows decline analytics — top decline reasons, declines by merchant, and a caller-type breakdown (human vs agent) so you can see exactly why and where transactions are being declined

TUE MAY 26

Added

Outbound webhooks for the Public API — organizations can now subscribe to card, cardholder, transaction, and balance events via signed HTTP POST instead of polling. Supports 10 event types, 5-stage automatic retries, and endpoint auto-disable after 7 consecutive days of failures
AgentCard-Signature header on all webhook deliveries — timestamped HMAC-SHA256 signature (t=…,v1=…) makes payloads replay-safe and easy to verify in any language
`agent-cards-admin webhooks` command group — list, create, update, delete, reveal and rotate secrets, and inspect delivery history from the CLI
CLI auth now validates your stored token before any command runs — stale or revoked keys are caught immediately with an interactive re-login prompt instead of a mid-command error

Fixed

card.updated events now fire on balance changes — webhook subscribers previously received no notification when a transaction settled and updated the card balance

FRI MAY 22

Improved

Backend and MCP server migrated from Railway to Vercel with AWS RDS Postgres — more reliable infrastructure with auto-scaling, advisory-lock-safe cron jobs, and DB-backed webhook retry queues

WED MAY 20

Fixed

Sandbox and live Stripe customer IDs are now stored separately — mixing a sandbox API key with a live cardholder row no longer returns a 500

SUN MAY 17

Improved

Card issuance is now exclusively through Privacy.com — Stripe Issuing code paths have been removed, simplifying the backend and eliminating a source of confusion between providers

SAT MAY 09

Added

Test mode — new accounts default to test mode, where card creation uses fully in-process sandboxing with no payment method, KYC, or plan limits required. Switch modes with `agent-cards mode [test|prod]`

Fixed

CLI card creation no longer prompts for confirmation when the backend requests approval — you're already at the keyboard, so approvals are auto-resolved immediately

WED MAY 06

Fixed

Sandbox API keys now mock card issuance entirely — sandbox_priv_ cards with deterministic 4242 PANs are returned instead of minting real cards
CLI login no longer hits rate limits during magic-link polling — /auth/me is now excluded from the auth rate limiter
Admin CLI shows actionable recovery steps on an invalid API key error — previously showed a terse message with no path forward

THU APR 23

Improved

Identity verification now requires a selfie that matches your document — the KYC session is rejected if the photo doesn't match
`cards details` now shows the billing address — agents filling checkout forms no longer need to look it up separately

Fixed

KYC start no longer returns a 500 on Stripe errors — upstream failures are now caught and return a proper error response

MON APR 13

Fixed

Sandbox payment intents are now routed correctly — webhook handlers and card close no longer fail with "No such payment_intent" on sandbox cards
Closing a card is now idempotent — concurrent close attempts no longer throw an error when the payment intent is already in a terminal state

FRI APR 10

Added

Identity verification — card creation now requires a government-issued ID, verified via Stripe Identity. Your name and date of birth are populated automatically from the verified document

THU APR 09

Added

Org subscriptions — organizations can now subscribe to a paid plan via the admin CLI (`subscribe`), unlocking production API keys (`sk_live_`)
Production vs sandbox mode switching — `agent-cards-admin env` lets you switch between environments and all subsequent commands use the right API and key prefix automatically

WED APR 08

Fixed

Admin CLI now defaults to the production API — previously defaulted to sandbox, causing cryptic JSON parse errors on first run

TUE APR 07

Improved

Unhandled async errors across all routes now fail fast with a proper response instead of timing out

Fixed

auth/me and slack/install endpoints returned errors in some environments — both now respond correctly

MON APR 06

Added

Promotion codes — discount codes can now be applied when upgrading to a paid plan at checkout

Improved

Transactional emails, approval pages, and MCP consent page updated with a cleaner monospaced design
Support emails now route to Slack in real-time — human replies from Slack are sent back as email replies automatically
MCP server now listed on Glama — discoverable by agents browsing the MCP directory

Fixed

Approval route errors now return a proper response instead of hanging — unhandled async failures are caught across all routes

SUN APR 05

Added

CLI auto-upgrade — `agent-cards` now checks for new versions on each run and upgrades itself automatically
Uptime monitoring across all API endpoints — incidents are detected and tracked automatically

Improved

Card list now shows full card IDs and creation dates — easier to identify and reference specific cards

Fixed

CLI update check no longer runs during the `update` command itself, preventing a redundant loop

THU APR 02

Added

Subscription plans — choose a plan that fits your usage, billed via Stripe with lifecycle emails at each stage
Monthly card usage shown in `agent-cards plan` — see how many cards you've created this billing period

TUE MAR 31

Improved

Transactional emails, approval pages, and the MCP consent page updated to match the new Agentcard design

FRI MAR 27

Improved

Card issuance upgraded — more reliable authorization and faster card delivery
CLI help output redesigned with grouped commands, examples, and a step-by-step 'How it works' flow

Fixed

Sandbox cardholder creation now uses the correct individual type to avoid issuing rejections

TUE MAR 25

Added

Remove payment method — available from the CLI, MCP, and backend API
Sandbox mock services fully wired — card creation and payments in sandbox mode are fully isolated

SAT MAR 21

Added

Refund endpoint for card transactions — admins can issue refunds directly via the API
Structured error codes for card creation and transaction failures — easier to handle errors programmatically

Improved

Card notification emails now sent to all org admins in addition to the cardholder
Spend limit and balance are validated before a transaction is processed — clearer errors on failure

Fixed

Stale card cleanup now correctly handles cards with a 2-hour timeout

FRI MAR 20

Added

sk_live_ API key support — production keys now work alongside sandbox sk_test_ keys

Fixed

IP blocklist now correctly handles IPv6-mapped addresses and proxy headers

MON MAR 16

Added

Webhook notifications for card events — get notified when cards are created, authorized, or closed

SUN MAR 15

Added

Slack integration — link your account, create cards with /card, and receive DM notifications for transactions and closures
Card creation requests in Slack require approval — admins are prompted in-channel before a card is issued

Improved

Card type language updated across all product copy and documentation

SAT MAR 14

Improved

setup-mcp now automatically prompts new users to sign up — no extra steps to get started from the CLI

FRI MAR 13

Added

Agentcard Pay Chrome extension — lets your AI agent detect checkout pages in the browser and fill card details automatically
pay_checkout, detect_checkout, and fill_card MCP tools — agents can now complete purchases end-to-end without manual card entry
Billing address collected at card creation and shown in card details

Improved

Payment method declines now return detailed error messages — failed methods are auto-removed so you can retry with a new one
Phone number is now required at signup to meet identity verification requirements
Card limit lowered to $50 — clearer upgrade messaging shown when the limit is hit

THU MAR 12

Added

Payment method onboarding — add a debit or credit card once and use it to fund all future cards
Hold-based card funding — funds are held on your payment method at card creation, captured when used, and released when the card is closed
Real-time authorization webhook — transactions are confirmed in real time

Improved

Wallet and x402 removed — funding is now handled directly via your saved payment method for a simpler flow
Stale cards are automatically cleaned up and the MCP and CLI messaging updated to reflect the new funding model

TUE MAR 10

Added

Sandbox test mode is now live — create sk_test_ API keys and integrate against api.agentcard.sh without real charges (test vs live is decided by the key prefix, same base URL)
REST API under /api/v1/ — organizations, cardholders, and wallets accessible via API key
Unified Cardholder model — identity, wallet, and cards all scoped to a named cardholder
Admin CLI for managing organizations, API keys, and team members
Multi-key management in the CLI — store and switch between API keys with `keys set`
API key authentication for CLI login — use your API key instead of email magic link

MON MAR 09

Added

Transaction history — view past charges per card in the CLI (`cards transactions`) and via MCP (`list_transactions`)
AI auto-reply in support chat — common questions answered instantly without waiting for a human
IN_USE card status shown while a transaction is being authorized

Improved

Full card lifecycle handled — declines, reversals, expirations, and refunds all tracked correctly
Rate limits relaxed to reduce false positives for normal usage patterns

Fixed

Card creation no longer crashes after collecting user info for the first time
Closed cards now behave correctly and sandbox mode removed to match production behavior

SUN MAR 08

Added

add_funds MCP tool — agents can now top up your balance directly
wallet balance and wallet fund commands added to the CLI
User info collection during card creation — the CLI and MCP now guide you through submitting identity details on first use
ChatGPT app store compatibility — Agentcard now works as a ChatGPT plugin

Improved

MCP tools now include safety annotations so agents understand which actions are read-only vs. destructive
Card creation returns a checkout URL when your wallet balance is too low — no more silent failures

Fixed

MCP create_card now correctly handles the 202 approval-pending response
One-time use card cancellation now uses native lifecycle controls

SAT MAR 07

Added

Wallet system — fund a wallet balance once, then create cards instantly without a new checkout each time
Real card issuance — physical-network virtual cards backed by your wallet
Inline approval flow for CLI and MCP — approve or deny card requests without leaving your terminal or chat

Improved

Card limits enforced — $500 maximum per card, up to 5 active cards at a time

Fixed

Nurture email sequence now respects step delays correctly — emails send in the right order at the right time
Failed nurture emails are now retried after delivery errors instead of being silently dropped

FRI MAR 06

Added

Chip logo with robot face easter egg across the site and dashboard
OAuth 2.1 support — connect Agentcard directly to Claude.ai as a native connector
MCP server now has a favicon so it appears with the Agentcard icon in Claude.ai
Waitlist reactivation email campaign for users who signed up but haven't gotten started

Improved

Onboarding email sequence expanded to 4 steps with bounce filtering — fewer failed deliveries
OAuth magic link emails now use the same polished template as all other Agentcard emails

Fixed

OAuth magic link verification now works correctly regardless of middleware order

THU MAR 05

Added

MCP package published to npm as @agent-cards/mcp with auto-sync from monorepo
Rewritten MCP README with quick setup instructions and clearer product description

Improved

MCP bumped to v0.2.1

WED MAR 04

Added

MCP auto-discovery via .well-known/mcp/server-card.json endpoint

TUE MAR 03

Added

Automated nurture emails to help you get started after signup
Clear decline reasons shown when a transaction is rejected — in CLI, MCP, and email

Improved

Content and technical optimizations for AI search engine visibility (GEO)

Fixed

Admin CORS headers now included on rate-limited responses
MCP server deploy now targets the correct service

MON MAR 02

Added

Full merchant category detection — every transaction now shows what it was spent on
Enhanced security controls — detailed audit trail for all card activity

Improved

Support notifications now include more context so issues get resolved faster
Login attempt limits relaxed — fewer lockouts during normal use
Better error messages when creating cards that need approval

Fixed

CLI no longer crashes when creating a card that requires approval

SAT FEB 28

Added

Live support chat directly from the CLI and MCP
Agents now request your approval before taking sensitive actions

Improved

Cards are clearly marked as single-use — they close automatically after the first transaction

FRI FEB 27

Added

setup-mcp command in CLI — connect your AI agent to Agentcard in one step