Developers · Changelog

What’s changed in BINK.

Changes to the API, webhooks and developer platform, newest first. Each entry is dated to the change that shipped it.

API version
v2
Supported
v2 · v1 (deprecated)
  1. Uploads moved to durable object storage

    Files uploaded through the API — identity documents in particular — are now stored in durable object storage behind a single storage service, and served only through authorised routes.

    • ChangedKYC document upload and retrieval routes now go through the storage service; documents are no longer reachable from a public uploads path.
  2. Payments statistics endpoint

    A dedicated endpoint returns per-currency payment aggregates for the merchant dashboard, computed in the database rather than in the client.

    • AddedGET /merchant/payments/stats — per-currency totals and counts for the Payments view.
  3. Company cards, funding, and per-service health

    Business accounts can fund company-owned cards from their balance, and the API health check now reports the state of each service rather than a single flag.

    • AddedCompany cards — POST /merchant/company-cards to issue, POST /merchant/company-cards/:id/fund to top up from the merchant balance.
    • AddedFunding routes for moving balance between wallets and company cards.
    • ChangedMerchant analytics are grouped by currency instead of summing across currencies.
    • ChangedGET /health reports a state for each service (settlement, FX, identity verification, notifications, ledger, reconciliation and others), which the status page now reads.
  4. Developer platform: API keys, versioning, OpenAPI, sandbox

    The first developer-facing platform layer: scoped API keys, an API version header, a machine-readable spec, and a sandbox for simulating events.

    • AddedAPI keys with the sk_ / pk_ and _test / _live prefixes, scoped per resource, with per-key request logging.
    • AddedAPI versioning — X-Api-Version header; v2 is current, v1 remains supported and is deprecated.
    • AddedGET /developer/openapi.json — generated OpenAPI 3.0 document — and GET /developer/versions.
    • AddedGET /developer/ping and POST /developer/sandbox/:kind — the API-key-authenticated probe and event simulator for test keys.
    • AddedHealth endpoints — GET /health, /health/live and /health/ready.
  5. Initial platform

    The merchant REST API, signed webhooks and the shared error envelope shipped together in the first release.

    • AddedMerchant API — payments, payouts, refunds, customers and invoices under /merchant.
    • AddedOutbound webhooks signed with HMAC-SHA256 in the X-Binkpay-Signature header, with retries and a dead-letter state.
    • AddedOne error envelope across the API — ok, statusCode, message, requestId, timestamp.

Entries cover the developer-facing surface only. Dates are the dates the change shipped to the main branch.

Developer portal

The rest of the platform.