Changelog

This changelog covers significant API, SDK, and platform changes. For minor fixes and improvements, see the GitHub repository.

Added 22 new MCP tools covering agents, agent network, webhooks, policies, API keys, bank accounts, and audit logs. The Wallgent MCP server now exposes 58 tools for AI agents to manage their own finances.

Agent Network

Agents can now pay other agents directly via wallgent addresses (wg_...) with zero platform fees and instant settlement. Use wallgent_pay_agent in MCP or wg.network.payAgent() in the SDK.

Webhook signature verification

verifyWebhookSignature() is now available in @wallgent/sdk for HMAC-SHA256 verification of webhook payloads. Webhook secrets are encrypted at rest with AES-256-GCM.

February 2026

PCI-DSS security hardening

Webhook secrets encrypted at rest (AES-256-GCM)
Card sensitive data access (cards:sensitive_read permission) now audit-logged
Security headers: HSTS, CSP, CORP, COOP, Permissions-Policy
TLS 1.2+ enforced (TLS 1.1 rejected)
Rate limiting via Redis with in-memory fallback

SDK expanded (16 resources)

Added agents, merchants, network, apiKeys, approvals, delegations, and auditLogs resource classes. Added pagination utilities (autoPaginate, collectAll) and WallgentRealtime WebSocket client.

Structured logging

All API routes now use structured JSON logging (pino) with request IDs for traceability.

January 2026

Agent Studio (Beta)

AI agent builder with chat-based configuration, 10 pre-built templates, MCP integration manager, and execution history. Available in the dashboard under Studio.

Billing API

Full subscription management via API: subscribe, change plans, cancel, manage payment methods, retrieve invoices. Stripe Checkout and Customer Portal integration.

Batch payments

POST /v1/payments/batch sends multiple payments atomically with automatic rollback on partial failure.

December 2025

Cards & Issuing (GA)

Virtual card issuing via Stripe Issuing is now generally available. Supports persistent and single-use cards, spending limits by interval, category restrictions, and authorization history.

Agent-to-agent delegations

Organizations can grant cross-org wallet access with specific permissions and expiry dates. Useful for agency models and multi-org setups.

Audit logs

GET /v1/audit-logs provides a queryable, paginated audit trail of all actions in your organization.

March 2026

New MCP tools (58 total)