Changelog

The VaultsPay API is versioned by date. Breaking changes are never rolled out without a new dated version.

Pin a specific version with the header:

VaultsPay-Version: 2026-04-01

2026-04-01

Added

• POST /v1/cards/{id}/convert_to_physical — convert a virtual card to a physical card while preserving PAN.
• controls.mcc_allowlist on cards.
• Webhook event card.shipping.delivered.

Changed

• card.limits is now a structured object (daily_spend, monthly_spend, per_transaction). The old scalar card.daily_limit is deprecated — it will be removed on 2026-10-01.

Fixed

• Pagination on /v1/accounts/{id}/transactions no longer skips a transaction when filtering by since.

2026-02-10

Added

• POST /v1/users/{id}/kyc_sessions — hosted KYC flow with redirect URL.
• Webhook event user.kyc.status_changed.
• Saudi Riyal (SAR) accounts and IBANs.

2025-12-05

Added

• Idempotency-Key support on all mutating endpoints.
• VaultsPay-Version header for API version pinning.

Removed

• Legacy /v0 endpoints (reached end-of-life).

2025-09-01

Initial public release of the VaultsPay Developer Portal.