OTPBox Changelog

Status page: real uptime percentiles and an incidents list

2026-09-29T00:00:00Z

The status page now tracks real uptime percentiles (24h / 7d / 30d / 90d) with response-time history and a recent-incidents list, instead of a fixed "all systems operational" badge.

Organizations, pooled Pro plans, dashboard rebuild, and webhook management

2026-09-28T00:00:00Z

Organizations can subscribe to Pro ($9/month, 5,000 requests/month pooled across every key) from the dashboard; new pricing page at /pricing.
Rebuilt customer dashboard: overview, projects & keys, usage, members, billing, activity, account settings, email invites, usage history charts.
Full webhook management: create/edit/enable/disable/rotate secret/send test/redeliver, with a per-delivery log.
MCP get_usage now matches REST GET /api/v1/usage; otpbox-sdk bumped to 0.2.0.
ttlHours honoured on inbox/batch/identity creation; identity REST routes scope-gated; MCP webhooks accept usage.approaching/usage.exceeded.
Usage-threshold (80%/100%) and billing lifecycle email/webhook notifications.
Lost Premium keys can be recovered by email.
Premium checkout live in production.
Fixed a stale-PWA caching bug after deploys.
Refund policy states an explicit 30-day window, in all 5 languages.
Data retention clarified: message content kept 30 days after expiry for abuse prevention, then deleted permanently; privacy policy and terms updated to match.

Phone field on the enterprise form; npm Trusted Publishing for otpbox-sdk

2026-09-27T00:00:00Z

The enterprise contact form now also collects a phone number.
otpbox-sdk releases now publish to npm via Trusted Publishing (OIDC) instead of a stored token.

Full webhook lifecycle coverage; otpbox-sdk published to npm

2026-09-26T00:00:00Z

Webhooks now cover inbox.created/deleted/expired, identity.created/deleted, and link.detected - not just new messages.
otpbox-sdk, the first-party TypeScript SDK, published to npm.
Homepage repositioned to lead with AI-testing-agent use cases alongside free temp mail.

MCP server, otpbox-sdk, otpbox-playwright, test identities, batches, webhooks, organizations

2026-09-25T00:00:00Z

Added a live "try it now" console to the docs, more CI/CD guides (GitHub Actions, GitLab CI, Jenkins, CircleCI), a public status page, and an enterprise contact form.
Added idempotency keys, sandbox test-mode keys, usage-threshold webhooks, and MCP rate limiting.
Added batch outcome states, automatic link classification, and scoped API keys.
Released otpbox-playwright, a first-party Playwright fixture.
Added synthetic test identities backed by a real inbox.
Added a dashboard UI for batches and webhooks, and per-tool MCP call metrics.
Released otpbox-sdk, the first-party TypeScript SDK.
Added REST parity: DELETE /api/v1/inboxes/:id and GET /api/v1/usage.
Shipped the batch API, webhooks, and the first MCP tools.
Launched organizations: accounts, membership and roles.
Added projects and org-scoped API keys.
Improved OTP extraction to catch bare codes with no surrounding keyword.
Removed the CAPTCHA step from minting a free API key.
Launched the OTPBox MCP server for Claude, Cursor and other MCP clients.
Fixed two mobile UX bugs.
Translated the privacy policy and terms of service into Spanish, Portuguese, French and German.