Changelog

​

Yativo Fiat

• Pay out by receive amount: set amount_type: "receive" on POST /exchange-rate (payout quotes) or POST /wallet/payout to fix exactly what the customer receives. Yativo works out the send amount and fees. POST /wallet/payout responses now include amount_type, send_amount, customer_receive_amount and debit_amount. See Pay out by receive amount
• Market rates: new GET /exchange-rates returns live indicative rates for every wallet currency, for display to your customers. See Live market rates
• Fee schedule: new GET /fees returns your account’s fees for every payin and payout method, virtual account currency and card action, including custom pricing. See Fees
• Login history: new GET /auth/login-history lists sign-ins with IP, device, location and suspicious-sign-in flags, including failed API key attempts. See Security
• EUR deposits via SEPA: customers can fund deposits by bank transfer to a Yativo IBAN. See Deposits
• Endpoints that change sign-in settings (passkeys, two-factor authentication, PIN, app secret) or delete the account now return 403 when called with an API key
• GET /ip-whitelist/check now returns api_key.label (was name) and a network.warning when your request came through a proxy
• MCP server: connect Claude, Cursor or any MCP client to your fiat account at https://api.yativo.com/mcp to check balances and deposits, and quote and send payouts with your approval. See Fiat MCP server

​

Docs

• AI and MCP servers compares the Docs, Fiat and Agentic Wallet MCP servers, and documents the Docs MCP server at https://docs.yativo.com/mcp

​

Yativo Crypto

• Card IBAN removed from the crypto docs. To receive money by bank transfer, use Yativo Fiat virtual accounts

​

Yativo Fiat

• API Keys: servers now authenticate with X-Api-Key and X-Api-Secret. See Authentication
• Deprecated: legacy API keys (Account ID + App Secret, POST /auth/login). From 15 October 2026, its tokens only work inside the dashboard
• IP whitelisting: every API key lists the server IPs allowed to use it, enforced from midnight on 14 October 2026. See IP whitelisting
• New GET /ip-whitelist/check to confirm each server is allowed
• Passkeys: everyone on a team can sign in to the dashboard with a passkey. See Passkeys

​

Yativo Crypto

• Customers: get, update and delete a customer, plus per-customer auto-forwarding. See Customers
• Agentic wallets: per-connector capabilities, GET /agent/capabilities, GET /agent/openapi.json, and prediction market trading. See Agentic Wallets
• Transactions: POST /transactions/preview-fee, daily and monthly withdrawal limits, and review holds for large sends
• Gas station low-balance email alerts with custom thresholds and recipients
• Swap: GET /swap/destinations and GET /swap/available-chains
• Deposit webhooks use the on-chain transaction hash as transaction_id; deposits below the minimum aren’t credited
• Secure card view: card data always renders light, and the view can be embedded on any website
• Crypto docs now cover the crypto API only. Fiat features are documented under Yativo Fiat

​

Docs

• Comprehensive Yativo Fiat documentation with guides, API references, KYC/KYB docs
• Added HMAC SHA256 webhook signature verification examples in 7 languages
• Docs reordered: Yativo → Yativo Fiat → Fiat API References → Yativo Crypto → Crypto API References
• Changelog page added

​

Monitoring

• Two public status pages for production/live/main:
  • status.yativo.com (primary)
  • status2.yativo.com (backup)
• Both pages show real-time uptime, incident history, and scheduled maintenance
• Fiat backend health check endpoints added (/api/health, /api/health/ping)

​

Yativo Crypto SDK

• 2FA enforcement on all critical operations: send funds, API key management, swaps, card freeze/unfreeze, auto-forwarding rules
• TypeScript SDK updated with twoFactorCode parameter on sensitive endpoints
• Chrome extension updated with 2FA modal prompt for sensitive actions

​

Security

• Webhook HMAC SHA256 signature verification documented with multi-language examples
• Removed API registration/login from public docs — onboarding exclusively via dashboard

​

Yativo Crypto

• Auto-forwarding rules API: create, list, update, delete rules for automatic fund forwarding
• Auto-forwarding supports twoFactorCode for create/update/delete operations

​

Security

• XSS sanitization added to all user-facing string inputs across crypto API
• Browser extension hardened against XSS injection vectors

​

Yativo Fiat

• Virtual card operations: activate, create, topup, freeze, withdraw, terminate
• Send money quote endpoint: /sendmoney/quote for pre-flight rate checks
• Wallet creation API: POST /wallet/create
• PDF transaction receipts: GET /business/transaction/receipt/{id}

​

SDKs

• TypeScript/Node.js SDK released with full crypto API coverage
• Python SDK released
• PHP SDK released
• Java SDK released
• Chrome extension with full wallet management UI

​

KYC/KYB Platform

• Individual KYC submission API at kyc.yativo.com
• Business KYB submission with document upload support
• Hosted KYC links for no-code integration
• Webhook notifications on KYC status changes

​

Yativo Fiat

• Magic link passwordless authentication
• API key generation with PIN protection
• Business virtual accounts (SEPA, SPEI, Brazil, USD LatAm)
• Service endorsements for regional payment rails

​

Launch

• Yativo Fiat platform launched at app.yativo.com
• Yativo Crypto platform launched at crypto.yativo.com
• Multi-currency wallets with support for 30+ currencies
• Real-time exchange rates and FX conversion
• Developer API with sandbox environment at smtp.yativo.com
• Webhook infrastructure for real-time event notifications