What’s changed in BINK.

1. 19 August 2026

   Uploads moved to durable object storage

   Files uploaded through the API — identity documents in particular — are now stored in durable object storage behind a single storage service, and served only through authorised routes.

   • ChangedKYC document upload and retrieval routes now go through the storage service; documents are no longer reachable from a public uploads path.
2. 27 July 2026

   Payments statistics endpoint

   A dedicated endpoint returns per-currency payment aggregates for the merchant dashboard, computed in the database rather than in the client.

   • AddedGET /merchant/payments/stats — per-currency totals and counts for the Payments view.

   Payments reference
3. 2 July 2026

   Company cards, funding, and per-service health

   Business accounts can fund company-owned cards from their balance, and the API health check now reports the state of each service rather than a single flag.

   • AddedCompany cards — POST /merchant/company-cards to issue, POST /merchant/company-cards/:id/fund to top up from the merchant balance.
   • AddedFunding routes for moving balance between wallets and company cards.
   • ChangedMerchant analytics are grouped by currency instead of summing across currencies.
   • ChangedGET /health reports a state for each service (settlement, FX, identity verification, notifications, ledger, reconciliation and others), which the status page now reads.

   System status
4. 13 June 2026

   Developer platform: API keys, versioning, OpenAPI, sandbox

   The first developer-facing platform layer: scoped API keys, an API version header, a machine-readable spec, and a sandbox for simulating events.

   • AddedAPI keys with the sk_ / pk_ and _test / _live prefixes, scoped per resource, with per-key request logging.
   • AddedAPI versioning — X-Api-Version header; v2 is current, v1 remains supported and is deprecated.
   • AddedGET /developer/openapi.json — generated OpenAPI 3.0 document — and GET /developer/versions.
   • AddedGET /developer/ping and POST /developer/sandbox/:kind — the API-key-authenticated probe and event simulator for test keys.
   • AddedHealth endpoints — GET /health, /health/live and /health/ready.

   Authentication API reference
5. 26 May 2026

   Initial platform

   The merchant REST API, signed webhooks and the shared error envelope shipped together in the first release.

   • AddedMerchant API — payments, payouts, refunds, customers and invoices under /merchant.
   • AddedOutbound webhooks signed with HMAC-SHA256 in the X-Binkpay-Signature header, with retries and a dead-letter state.
   • AddedOne error envelope across the API — ok, statusCode, message, requestId, timestamp.

   Webhooks reference Errors reference

Entries cover the developer-facing surface only. Dates are the dates the change shipped to the main branch.