Product history
A public, dated record of LinkSell releases. Roadmap items stay on the roadmap until they are actually published here.
Ten dependencies with highseverity advisories are pinned to fixed versions, which takes the count from 13 to 3. The three that remain sit in the unused Solana settlement path and c...
Read release noteEight more dependencies with moderate advisories are pinned to fixed versions, which brings the moderate count from 30 to 0. Six low advisories in a buildtime polyfill remain, reco...
Read release noteWhen an AI agent previews a write through the MCP server, the preview digest it must echo back is now tied to that tool, your store, your API key and the moment it was issued. A di...
Read release noteEvery MCP write tool now refuses an argument its schema does not declare validationerror, with the offending keys in the message instead of silently ignoring it. invoicecreate neve...
Read release noteSubscription and checkoutsession writes on the REST API and the MCP subscriptioncreate tool now refuse a producttype that starts with platform 422 reservedproducttype. That prefix...
Read release note"Open sandbox" now requires a verified email on production, and the sandbox binds your sandbox account to your production account rather than to the email address alone. A sandbox...
Read release noteA key that a buyer creates in the customer portal is confined to that buyer's own customer record. Keys created from older or imported subscriptions used to read as storewide becau...
Read release noteWhen LinkSell suspends a merchant, the paid API gateway, the merchant charge API, the sitemiddleware charge, and hosted checkout sessions now refuse with 503 merchantunavailable, t...
Read release noteCreating a store now succeeds completely or not at all, and the store form tells you when a store address is already taken instead of failing. A hostname under LinkSell's own domai...
Read release noteThe two remaining record writers, subscriptions and checkout sessions, now apply the same store check as invoices. A request that names a store other than the one it runs under is...
Read release noteSet an EDGESIGNINGSECRET on the sitemiddleware Worker and every request it forwards carries a signed XLinkSellEdge header over the method, the decoded path and a timestamp. Your or...
Read release noteThe sitemiddleware Worker decodes the request path, collapses repeated slashes and resolves dot segments before it matches your paid routes, and it tests both the raw and the decod...
Read release noteOperators can now hide notready surfaces for the Alpha launch from a single console at /ops/visibility — homepage sections, standalone surfaces the marketplace, networks, whole doc...
Read release noteSelfserve signup is closed for the private Alpha. Prospective merchants now join a waitlist at /requestaccess, and we invite them with a onetime registration link once approved.
Read release noteThe nightly settlement reconcile now catches mismatched transaction hashes sooner and surfaces them on the operator dashboard within minutes instead of the next cycle.
Read release noteDuplicate webhook deliveries that could occur when an endpoint returned a 5xx midretry are now deduplicated by delivery id.
Read release note