Partner JWT face-scan verification
Partners can now launch users straight into biometric face-scan verification usingtarget: "naattech" in the JWT launch flow.
MXN ramps require biometric verification before fiat transfers are enabled.Agreement signing via launch flow
Launch users directly into electronic-signature and terms-and-conditions agreement flows usingtarget: "agreements" in the
user launch flow. Works with both Firebase and
partner JWT authentication.Auth token access and refresh pairs
POST /auth/token now returns an access token and a refresh token. Use the
refresh token to obtain a new access token without re-signing a JWT:PT wrap and unwrap orders on Solana
Partners can now execute Principal Token wrap and unwrap orders on Solana using the existing/ramp/quote and
/ramp/order flow with PT asset identifiers — the
testing swaps guide walks through it.Onboarding auto-creates organization
When a new user completes onboarding, an organization is created for them automatically — partners no longer need to callPOST /ramp/organization separately after signup.KYC submission validates required fields
POST /ramp/customer/{customer_id}/kyc now validates required personal fields
up front — email, phoneNumber, occupation, name, dateOfBirth, and a
full address. Mexican customers (address.country: "MX") must include a
CURP; an RFC is optional. Missing or invalid fields return 400 with a list
of what to fix, as detailed in the onboarding guide.Authentication errors link to docs
Errors fromPOST /auth/token and the JWT launch flow now include an
error_uri (OAuth 2.0) that points to the matching entry in the
authentication errors guide, so you can jump
straight to the cause and fix.Auth token endpoint
The newPOST /auth/token endpoint issues access tokens for server-to-server
calls — prefer it over launch-flow JWTs when you need backend-only access, as
described in the JWT authentication guide.Scoped API key enforcement
API keys now enforce scope-based access control: keys created after June 8 default to minimal scopes, while existing keys keep working unchanged. The authentication reference explains the scope model.Bank compliance webhook signal
Thebank_account_updated webhook now signals when a bank needs
additional verification: while compliant is false, the bank can’t be used
until the customer completes the verification flow.NaatTech biometric verification
Identity verification now supports NaatTech biometric face-scan — the foundation for the partner JWT launch flow.Partner JWT auth launch
The partner dashboard can now launch users via partner-issued JWTs, so you can authenticate users with your own identity provider, as set up in the JWT authentication guide.JWKS-based JWT verification
Partners can now register a JWKS endpoint for JWT-based authentication: the platform fetches and caches public keys from your/.well-known/jwks.json
endpoint to verify partner-issued tokens, as described in the
JWT authentication guide.