– · Generated from 25 commits · Last updated
Self-serve account deletion, stronger password security, and expanded OFAC country data ship this week — plus new rate-limit headers and MCP resources for developers building compliance workflows.
NewDelete your account directly from the dashboard
You can now close your account from the Account settings page without contacting support — a short offboarding questionnaire and password confirmation are all it takes. Billing is cancelled automatically, and a confirmation email is sent when deletion is complete.
NewRate-limit headers on every API response#
All metered API responses now include standard RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, and RateLimit-Policy headers so your application can monitor quota consumption in real time and back off gracefully before hitting a 429. Monthly quota errors also include a Retry-After header pointing to your next reset.
NewMCP server now exposes built-in compliance resources#
The MCP server for AI agents now advertises two always-available resources — a live sanctions lists reference and a usage guide — so agent clients get useful compliance context without needing an authenticated session or burning API quota.
NewOFAC sanctioned-country data refreshed and expanded#
The OFAC country designations dataset now includes Afghanistan, Mali, Somalia, and South Sudan, and reflects Syria's transition from the comprehensive Syria program to the successor PAARSS program. Country data is also kept in sync automatically at startup and on a daily schedule, so production always reflects the latest designations without any manual intervention.
NewPEP screening endpoint added to the project's payment activation flow#
The /screen/pep endpoint is now included in the full suite of endpoints activated through the project's x402 payment layer, so developers can start screening for politically exposed persons in the same seamless flow as other compliance checks.
ImprovedPassword strength indicator on signup and password reset
A real-time strength indicator now guides you through meeting the project's password requirements — 12 or more characters with a mix of letters, numbers, and symbols — while creating or resetting your account. The same rules are enforced server-side, so you get clear, specific feedback rather than a generic error if a password doesn't qualify.
ImprovedDocumented API versioning and deprecation policy#
the project now publishes a formal API versioning policy: URL-based versioning, additive-only changes within a version, and a minimum 90-day notice window with Sunset and Deprecation headers before any breaking change. You can find the full policy in the API documentation.