Changelog

Notable changes to the public API, SDKs, and webhooks. See Versioning & stability for what counts as a breaking vs. backward-compatible change. Dates are UTC.

2026-06-07 — Developer platform

• OpenAPI 3.1 spec published at /api/openapi.json, with an interactive API reference. Import it into Postman or any OpenAPI codegen.
• Developer webhooks — subscribe your services to platform events (tool_call.evaluated, approval.resolved, kill_chain.detected, and more) with signed, retried, replayable delivery. See Webhooks.
• SDKs — added webhook signature verification: constructEvent / verifyWebhookSignature (TypeScript) and construct_event / verify_signature (Python).
• Idempotency — POST /gateway/tool-call and /gateway/verify-card now accept an Idempotency-Key header; safe retries replay the first response. See Gateway API → Idempotency.
• Versioned URLs — the gateway is now reachable at the explicit /api/v1 base path; the unversioned /api/... paths remain as aliases. See Versioning & stability.

2026-06-06 — Python SDK

• axiorank 0.1.0 on PyPI — parity with the TypeScript SDK: sync (AxioRank) and async (AsyncAxioRank) clients, tool_call / enforce, card preflight, and a LangChain callback handler. See the Python quickstart.

2026-06-03 — Gateway API + TypeScript SDK

• Gateway API — the public HTTP contract: tool-call scoring/enforcement, card preflight, and inbound request verification. See the Gateway API.
• @axiorank/sdk 0.1.0 on npm — toolCall() / enforce(), verifyCard(), and the axioGuard inbound middleware. See the TypeScript quickstart.
• @axiorank/mcp-gateway on npm — govern an MCP server with no code changes.