https://cybertoolchain.io/tools/didit New releases and features in Didit, tracked by The Cyber Toolchain. en Sun, 01 Nov 2026 07:54:50 GMT https://docs.didit.me/openapi-25.json https://docs.didit.me/openapi-25.json Sun, 01 Nov 2026 07:54:50 GMT API surface changed: +25 endpoints, 51 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /v3/session/{sessionId}/kyb/parties/drafts/{draftId}/⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /v3/organization/{organization_id}/application/{application_id}/analytics/today/ • New endpoint GET /v3/session/{sessionId}/files-export/{exportId}/ • New endpoint GET /v3/session/{sessionId}/kyb/extracted-parties/ • New endpoint GET /v3/session/{sessionId}/kyb/parties/drafts/ • New endpoint GET /v3/travel-rule/networks/ • New endpoint GET /v3/travel-rule/networks/questionnaire/ • New endpoint GET /v3/travel-rule/unmatched/ • New endpoint GET /v3/travel-rule/wallet-proofs/ • New endpoint PATCH /v3/session/{sessionId}/kyb/parties/drafts/{draftId}/ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/openapi-25.json https://docs.didit.me/openapi-25.json Wed, 28 Oct 2026 08:02:33 GMT API surface changed: +11 endpoints, 13 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /v3/organization/{organization_id}/application/{application_id}/transactions/delete/⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds new `GET /v3/import-jobs/` and `GET /v3/import-jobs/active/` endpoints. • New endpoint GET /v3/organization/bank-verification-pricing/ • Adds new `GET /v3/session/imports/providers/` and `POST /v3/session/imports/providers/check/` endpoints. • Adds new `POST /v3/session/imports/{importId}/cancel/`, `POST /v3/session/imports/{importId}/pause/`, `POST /v3/session/imports/{importId}/resume/`, `POST /v3/session/imports/{importId}/retry/` and `POST /v3/session/imports/{importId}/start/` endpoints. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/openapi-25.json https://docs.didit.me/openapi-25.json Sun, 25 Oct 2026 07:59:13 GMT API surface changed: +82 endpoints, 60 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /v3/events/{event_uuid}/delete/⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /v3/lists/{list_uuid}/ • New endpoint DELETE /v3/lists/{list_uuid}/entries/{entry_uuid}/ • New endpoint DELETE /v3/travel-rule/counterparty-contacts/{contact_uuid}/ • New endpoint GET /v3/aml/dataset-freshness/ • New endpoint GET /v3/blocklist/ • New endpoint GET /v3/events/ • New endpoint GET /v3/events/enrichment-metrics/ • New endpoint GET /v3/events/subjects/{vendor_data}/ • New endpoint GET /v3/events/{event_uuid}/ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Fri, 23 Oct 2026 11:17:48 GMT Batch Session Delete gains async job polling, `delete_all` with `filter_*` narrowing, and child-verification counts in results.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Breaking changes: • Queued webhook deliveries and their retries for a deleted session are now dropped; previously the changelog stated they would still arrive after deletion. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog.md https://docs.didit.me/changelog.md Fri, 23 Oct 2026 07:56:42 GMT Didit adds async batch-delete jobs, filtered select-all deletion, and child-verification counts in deletion results.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds async deletion job workflow: `Batch Delete Sessions` returns HTTP `202` when more than 20 sessions match, and callers poll `Get Session Deletion Job` until the job reports `COMPLETED` or `FAILED`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `delete_all: true` to `Batch Delete Sessions` to delete every session matching a filter set, narrowed with `filter_`-prefixed parameters (e.g. `filter_status`, `filter_date_from`) mirroring the `List Sessions` filters — invalid or unreadable filter values are rejected before any deletion begins. • Deletion results now include `deleted_child_verifications`, reporting how many key-person and company verifications were deleted as children of a business verification. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/openapi-25.json https://docs.didit.me/openapi-25.json Thu, 22 Oct 2026 07:58:32 GMT API surface changed: 14 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • GET /v3/transactions/: param travel_rule_status (query) added⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog.md https://docs.didit.me/changelog.md Wed, 21 Oct 2026 07:44:15 GMT Didit adds digital-ID wallets, KYB data tiers, AML/monitoring APIs, Face Search toggle, iGaming TM presets, and new MCP tools.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `POST /v3/users/aml-monitoring/` and `POST /v3/businesses/aml-monitoring/` to toggle ongoing AML monitoring on or off for up to 1,000 profiles at a time, with a dry-run estimate and async job support for large batches.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `POST /v3/kyb/shareholders/` and `POST /v3/kyb/ubo/` endpoints and three selectable KYB registry data tiers (Lite, Shareholders, UBOs) in the KYB Registry Check step, with per-response tier confirmation, Lite billing when ownership data is absent, per-country tier pricing shown before selection, and a flat $0.75 fee for manually entered companies. • Adds `GET /v3/users/{vendor_data}/generate-pdf/` to return a branded PDF of a user's 20 most recent completed sessions via API. • Adds `sandbox_scenario` field on `POST /v3/aml/` to simulate an AML hit in sandbox without an end-user session. • Exposes `workflow_terminal_node_id` on the decision API (via `include=events`) and adds a session timeline view showing each branch decision and the terminal status node, surfacing which node ended a session and why each branch was taken. • Adds a `face_search_enabled` switch on the Liveness and Age Estimation Rules tabs to toggle Face Search per workflow without affecting existing workflows, and a `skip_liveness_and_face_match` per-country switch (on by default) to control whether liveness and face match run after a database lookup. • Adds `document_liveness` scores (portrait replacement, printed copy, screen replay) to every decision API result, even when no warning fired. • Adds a `DOCUMENT_BACK_SIDE_NOT_AVAILABLE` informational warning to ID Verification results when the document catalog has no registered back side for the recognized document, and a configurable warning for documents with a covered critical field (number or other critical field obscured), including on the standalone ID Verification API. • Adds `didit_session_explain_decision`, `didit_session_webhooks`, and `didit_session_webhook_resend` MCP tools to trace why a session ended Approved, Declined, or In Review, list a session's webhook deliveries (optionally waiting for the first one), and resend a specific webhook delivery. • Deprecates `X-Signature-Simple` webhook verification header in favor of `X-Signature-V2`. Breaking changes: • `X-Signature-Simple` is deprecated — verify webhooks with `X-Signature-V2` instead. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/openapi-25.json https://docs.didit.me/openapi-25.json Mon, 19 Oct 2026 07:56:20 GMT API surface changed: +18 endpoints, 16 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /v3/travel-rule/vasps/{vasp_id}/decision/⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /v3/session/{sessionId}/signatures/{nodeId}/documents/{documentId}/file/ • New endpoint GET /v3/session/{sessionId}/signatures/{nodeId}/evidence/ • New endpoint GET /v3/session/{sessionId}/signatures/{nodeId}/fields/{fieldId}/image/ • New endpoint GET /v3/transactions/{transaction_id}/travel-rule/messages/ • New endpoint GET /v3/travel-rule/pickup/{token}/messages/ • New endpoint GET /v3/travel-rule/vasps/{vasp_id}/ • New endpoint GET /v3/travel-rule/vasps/{vasp_id}/decision/ • New endpoint GET /v3/travel-rule/vasps/{vasp_id}/questionnaires/ • New endpoint GET /v3/travel-rule/vasps/{vasp_id}/screening/ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/openapi-25.json https://docs.didit.me/openapi-25.json Sun, 11 Oct 2026 10:03:11 GMT API surface changed: +1 endpoint, 9 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /v3/sessions/delete/{job_id}/⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Mon, 05 Oct 2026 07:56:18 GMT Didit adds digital ID wallets, KYB data tiers, AML monitoring APIs, MCP tools, and a Web SDK 0.4.0 with transaction submission.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds AML monitoring APIs (`POST /v3/users/aml-monitoring/`, `/v3/businesses/aml-monitoring/`) supporting batch operations for up to 1,000 profiles, with dry-run mode and async job support; adds `POST /v3/kyb/shareholders/` and `POST /v3/kyb/ubo/` endpoints for shareholder and UBO data; adds `GET /v3/users/{vendor_data}/generate-pdf/` for branded session PDFs • Adds `sandbox_scenario` parameter to simulate AML hits in sandbox, `workflow_terminal_node_id` field to expose workflow decision paths, and `X-Signature-V2` webhook verification header (deprecating `X-Signature-Simple`) • Adds Didit MCP tools for AI-agent-driven session debugging and workflow building: `didit_session_explain_decision`, `didit_session_webhooks`, `didit_session_webhook_resend`, `didit_workflow_build_graph`, `didit_workflow_get_kyb_registry_catalog`, plus webhook delivery management • Adds `document_liveness` scores (portrait replacement, printed copy, screen replay) to all decision API results, `face_search_enabled` switch to control Face Search per workflow, and `skip_liveness_and_face_match` per-country switch for government-register lookups that return portraits • Adds live digital ID wallet verification for MitID (Denmark), Finnish Trust Network (Finland), Smart-ID (Estonia, Latvia, Lithuania, Belgium), Mobile-ID (Estonia, Lithuania), and BankID Sweden; adds per-country source selection and on-demand wallet screening from the console • Adds Web SDK 0.4.0 features: submitTransaction() method for browser-based transaction monitoring with scoped tokens and device intelligence, plus wallet-ownership check support with callback reporting • Adds three-tier KYB registry data purchasing (Lite, Shareholders, UBOs) with per-country pricing; adds iGaming rule presets for Transaction Monitoring and current-value velocity filters • Adds workflow graph validation flagging contradicting branches, branch-on-document-subtype routing, and covered-critical-field warnings for obscured document fields • Adds `detected_codes` field surfacing QR/barcodes on documents, `DOCUMENT_BACK_SIDE_NOT_AVAILABLE` warning, and ongoing-monitoring evidence display on AML results • Adds ID document support: police ID cards (Argentina, Brunei, Colombia, Philippines), Alberta DL/ID (2026), Moldova DL (2026), NYC ID (2019), back-side capture for Brazilian/Thai DLs and Canadian passport Page B • Adds SMS branding customization with sender name field and live preview; adds Web SDK modal support for Bosnian, Kazakh, Kyrgyz, and Albanian Breaking changes: • `X-Signature-Simple` is deprecated — migrate webhook signature verification to `X-Signature-V2`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Sun, 04 Oct 2026 07:49:44 GMT Didit: Adds white-label branding to wallet sign-in pages, with Smart-ID and Mobile-ID running inside the same verification design. • Adds per-country source selection for database lookups where more than one lookup source is available. • Adds session timeline display of each branch decision and terminal status node in workflow sessions. • Adds liveness video analysis option to decline a session outright (not only report) on non-live recordings. • Adds emulated/virtualized device detection during liveness capture as an actionable risk signal. • Adds retry control (one to five attempts, default one) for database lookups, counting only attempts the source actually answered. • Adds detailed per-field match breakdown to lookup results, showing what the user provided, what the source held, and whether it matched, plus source-error details. • Adds Copilot capability to switch organization or application, rename applications, duplicate/rename/archive/link workflows, open member/role/webhook/list dialogs, and block a user or download a session PDF. • Adds reply-language selection, Word and plain-text file attachment, and full conversation-history deletion to the Copilot. • Adds drag-and-drop attachment upload and self-service ticket closure (with reply-to-reopen) in the support console. • Adds sandbox environment label to transactions evaluated on sandbox applications in Transaction Monitoring. • Adds expanded currency picker listing every circulating currency in Transaction Monitoring, with per-currency decimal formatting in transaction PDFs. Breaking changes: • `X-Signature-Simple` is deprecated — verify webhooks with `X-Signature-V2` instead. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog.md https://docs.didit.me/changelog.md Fri, 02 Oct 2026 07:34:52 GMT Didit adds digital ID wallets, KYB data tiers, AML monitoring APIs, MCP tools, and expanded workflow controls⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `POST /v3/kyb/shareholders/` and `POST /v3/kyb/ubo/` endpoints for standalone business ownership data; response names the tier requested and the tier delivered, with Lite as fallback when ownership data is unavailable⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `POST /v3/users/aml-monitoring/` and `POST /v3/businesses/aml-monitoring/` to turn ongoing AML monitoring on or off for up to 1,000 profiles at a time, with a dry-run estimate mode and background job support for large batches • Adds `GET /v3/users/{vendor_data}/generate-pdf/` to return a branded PDF of a user's 20 most recent completed sessions • Adds `sandbox_scenario` parameter on `POST /v3/aml/` to simulate an AML hit in sandbox without an end-user session • Adds `face_search_enabled` switch on the Rules tabs for Liveness and Age Estimation steps to disable Face Search per workflow • Exposes `workflow_terminal_node_id` on the decision API with `include=events` to surface which branch path and terminal node ended a session • Adds `document_liveness` scores (portrait replacement, printed copy, screen replay) to every decision API result, even when no warning fired • Adds `detected_codes` field to Proof of Address and Document AI results, returning QR codes and barcodes found on the document • Adds `DOCUMENT_BACK_SIDE_NOT_AVAILABLE` informational warning to ID Verification results when only a front side could be collected • Adds submitTransaction() to the web SDK for submitting transactions for monitoring using a scoped transaction token, with automatic device intelligence collection • Adds `defaultDocumentCamera`, `defaultLivenessCamera`, `showDocumentCameraSwitchButton` and `showLivenessCameraSwitchButton` options to the JavaScript SDK for kiosk and operator-facing camera control; also available as query parameters `liveness_camera=back` and `liveness_camera_switch=false` • Adds `didit_session_explain_decision` MCP tool to trace why a session ended Approved, Declined or In Review • Adds `didit_session_webhooks` MCP tool to list a session's webhook deliveries and optionally wait for the first one, and `didit_session_webhook_resend` to resend a specific delivery • Adds `didit_workflow_build_graph` MCP tool to turn a plain feature list (with countries named exactly) into a complete, validated workflow graph • Adds `didit_workflow_get_kyb_registry_catalog` MCP tool to return registry tiers and prices per country • Adds per-country `skip_liveness_and_face_match` switch (on by default) to control whether liveness and face-match steps run after a database lookup • Introduces digital ID wallet verification in production: MitID (Denmark), Finnish Trust Network (Finland), Smart-ID (Estonia, Latvia, Lithuania, Belgium), Mobile-ID (Estonia, Lithuania), and BankID Sweden • Adds KYB data tiers — Lite, Shareholders, or UBOs — selectable per country in the KYB Registry Check step and in one-off checks, with price shown before selection • Adds branch-on-document-subtype routing in the workflow editor to route sessions on exact document subtypes (e.g. national ID card vs. residence permit) • Adds contradiction detection to the workflow editor: branches whose condition contradicts their destination node get a warning badge on the canvas and in the graph-validation API • Enables liveness video analysis to decline a session (not only report), and flags liveness captures from emulated or virtualized devices as an actionable risk • Adds a 'Same face, different document' control to configure what happens when a face already approved on another identity document reappears • Adds covered-critical-field warning: a document whose number or another critical field is obscured raises a configurable warning, including on the standalone ID Verification API • Adds wallet screening as a single on-demand console check (now labelled 'Wallet Verification & Screening') without requiring a full session • Adds AML screening of any person named by an earlier Document AI step (e.g. from a tax certificate or articles of incorporation) • Adds iGaming rule presets (bonus abuse, chip dumping, and others) to the Transaction Monitoring rules library • Adds current-value velocity filters to Transaction Monitoring rule conditions • Adds SMS sender name customization via the new SMS tab in Customization, with live preview • Adds Didit Copilot slash skills: type '/' in the composer to browse page-specific action templates • Adds undo for Copilot workflow edits: a change card lists what changed and 'Undo' reverts it • Adds wallet-ownership check support to the web SDK: when a transaction requires a wallet-ownership check, the SDK runs it and reports completion via callback • Adds four additional modal languages to the web SDK: Bosnian, Kazakh, Kyrgyz, and Albanian • Adds webhook delivery listing and resend capability from the Didit MCP • Adds source selection per country in the Countries tab for non-document lookups where multiple sources exist (including Argentina without selfie and Brazil with verified selfie) • Adds support for Police ID cards from Argentina, Brunei, Colombia, and the Philippines • Adds Alberta driving licence and ID card (2026) with barcode validation, Moldova driving licence (2026), and NYC Identification Card (2019) • Adds back-side capture for Brazilian state driving licences, Thai driving licences, and Canadian passport Page B • Adds expired-document resubmission emails that specify the document expired, customizable via the Texts tab Breaking changes: • `X-Signature-Simple` is deprecated — webhooks must now be verified with `X-Signature-V2` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Sat, 26 Sep 2026 07:48:42 GMT Didit: Adds `liveness_camera` and `liveness_camera_switch` query parameters to the verification URL for controlling camera selection and switcher visibility when opening the flow directly without the SDK. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Fri, 25 Sep 2026 07:51:44 GMT Web SDK 0.4.0 adds native camera-control options — defaultDocumentCamera, defaultLivenessCamera, and switcher-hide flags — plus matching URL query parameters.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `defaultDocumentCamera`, `defaultLivenessCamera`, `showDocumentCameraSwitchButton`, and `showLivenessCameraSwitchButton` options to the Web SDK, bringing camera-control parity with the native SDKs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Thu, 24 Sep 2026 07:52:23 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Wed, 23 Sep 2026 07:43:59 GMT Didit: Adds `liveness_camera` and `liveness_camera_switch` (and equivalent document) query parameters for direct verification URLs, enabling the same camera control without going through the SDK. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Tue, 22 Sep 2026 07:44:59 GMT Didit Web SDK 0.4.0 brings native camera-control options to the browser, including rear-camera and switcher-hide flags.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `defaultDocumentCamera` and `defaultLivenessCamera` SDK options to the Web SDK, allowing the document and face-capture steps to open on the rear camera by default (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ for kiosk or operator-assisted flows). • Adds `showDocumentCameraSwitchButton` and `showLivenessCameraSwitchButton` SDK options to the Web SDK to hide the in-capture camera switcher and lock users to the chosen lens. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog.md https://docs.didit.me/changelog.md Sun, 20 Sep 2026 07:33:39 GMT Web SDK 0.4.0 gains camera control options; Mobile SDKs 4.8.0 add national ID-number lookup and digital ID wallet sign-in on native entry screens.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `defaultDocumentCamera`, `defaultLivenessCamera`, `showDocumentCameraSwitchButton`, and `showLivenessCameraSwitchButton` options to the web SDK (`@didit-protocol/sdk-web` 0.4.0), matching the camera controls already available in native SDKs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `liveness_camera` and `liveness_camera_switch` query parameters to the direct verification URL for camera control without the SDK. • Adds national ID-number lookup and digital ID wallet sign-in as verification methods on the native SDK entry screen (iOS, Android, React Native, Flutter 4.8.0), with on-device field validation and optional fallback to document capture. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/openapi-25.json https://docs.didit.me/openapi-25.json Mon, 14 Sep 2026 14:39:03 GMT Didit: New endpoint GET /v3/users/{vendor_data}/generate-pdf/ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Mon, 14 Sep 2026 07:43:30 GMT Didit: Adds Credential details to session results for digital-ID-wallet verifications: the wallet, its issuing authority, the level of assurance asserted, and whether the signature checked out • Adds cost preview in the console: each lookup switch displays its billing rate before the configuration is saved Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/openapi-25.json https://docs.didit.me/openapi-25.json Sun, 13 Sep 2026 14:47:53 GMT Didit: New endpoint GET /v3/users/{vendor_data}/generate-pdf/ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Sun, 13 Sep 2026 13:01:12 GMT Didit adds non-document national ID lookup and digital ID wallet support to ID Verification, with per-country method controls and new assurance-tier fields on sessions, webhooks, and the decision API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `status.updated` webhook and decision API fields carrying the verification method (`Documentary`, `Data match`, `Cryptographic`) and assurance tier for every ID Verification session.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds per-country method controls via the `Countries` tab on the ID Verification step and through the API, letting you enable or disable document capture, national ID lookup, and digital ID wallets country by country. • Adds non-document national ID-number lookup: the user submits their national ID number and personal details, checked against an authoritative source (government register, credit bureau, or similar) with no photograph or upload required. • Adds configurable fallback behavior per non-document method failure mode (partial match, no match, no source response, cancelled or timed-out wallet sign-in) — each routes the user to document capture or declines the session. • Adds Digital ID wallet support on the roadmap (MitID, BankID, itsme, Vipps, iDIN, UAE PASS, gov.br, EUDI Wallet) — configurable in the console as `Coming soon` but not yet enabled for production. • Mobile SDKs 4.8.0 (iOS, Android, React Native, Flutter) surface ID Verification methods — national ID lookup and digital ID wallet sign-in — on a single entry screen alongside document capture, with on-device field validation before submission. • Adds `SDK_VERSION` constant to `@didit-protocol/sdk-web`, generated from the package version across all build formats and the TypeScript declaration. • Lookup retry count is configurable from one to five attempts (default two), with only source-answered attempts counted toward billing; format-invalid numbers never reach the source. • Embedded mode in the Web SDK uses the host element's content box instead of inheriting the modal height cap. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog.md https://docs.didit.me/changelog.md Sun, 13 Sep 2026 10:33:35 GMT Mobile SDKs 4.8.0 bring national ID-number lookup and digital ID wallet sign-in to iOS, Android, React Native, and Flutter.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Improves questionnaire error messaging in mobile SDKs so users see the server-returned rejection reason instead of a generic failure.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/openapi-25.json https://docs.didit.me/openapi-25.json Sat, 12 Sep 2026 13:29:11 GMT API surface changed: +3 endpoints, 13 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /v3/aml-monitoring/jobs/{job_id}/⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint POST /v3/businesses/aml-monitoring/ • New endpoint POST /v3/users/aml-monitoring/ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Sat, 12 Sep 2026 10:44:02 GMT Didit adds non-document identity lookup and per-country method controls, with verification method and assurance tier now returned on every session result.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Data match` (non-document lookup) as a new ID Verification method: users enter a national ID number and personal details, checked against government registers, credit bureaus, or utility/residential records — no photograph or upload required.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Sessions, the decision API, and the `status.updated` webhook now carry the method that produced each ID Verification (`document`, `Data match`, or wallet) and its assurance tier (`Documentary`, `Data match`, or `Cryptographic`). • Adds `Registry comparison` result fields showing every compared field, the value the user provided, the value the source held, and whether it matched. • Adds per-country method controls via the `Countries` tab on the ID Verification step, toggleable through both the console and the API. • Where a government register returns a portrait (South Africa, Nigeria, Argentina, Panama), lookup automatically adds passive liveness and face match at no extra charge, allowing downstream Liveness and Face Match steps to be skipped. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Fri, 11 Sep 2026 07:38:47 GMT Didit: Adds per-country method control via the `Countries` tab on the ID Verification step and through the API, letting operators toggle document capture, non-document lookup, and (future) digital ID wallets country by country. • Adds non-document lookup as a live verification method — the user submits a national ID number and personal details, which are checked against the authoritative source (government register, credit bureau, or utility/residential records) for that country with no photograph or upload required. • Adds `Registry comparison` result block to sessions, exposing each compared field with the user-provided value, the source-held value, and match status, plus an error row when a source did not respond. • Adds `Credential details` result block to sessions for wallet verifications, showing the wallet, issuing authority, asserted level of assurance, and signature verification outcome. • Adds configurable retry count (one to five attempts, default two) for non-document lookups, counting only attempts the source actually answered. • Adds format pre-validation for lookup ID numbers — a number that fails the format check never reaches the source and is neither counted nor billed. • Adds real-time pricing display in the console — each failure-handling switch shows its cost before the configuration is saved. • Adds passive liveness and face-match to non-document lookups for countries where the government register returns a portrait (South Africa, Nigeria, Argentina, Panama), bundled into the lookup price. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Thu, 10 Sep 2026 10:38:45 GMT Didit adds non-document ID lookup and per-country method controls, with assurance tiers surfaced in the decision API and webhooks.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `status.updated` webhook payload fields and decision API fields carrying the verification method (`Documentary`, `Data match`, `Cryptographic`) and assurance tier for every ID Verification session.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a `Countries` tab on the ID Verification step to toggle document capture, non-document lookup, and digital wallet methods on or off per country, with the same controls available through the API. • Adds `Registry comparison` result detail: every field comparison showing what the user provided, what the source held, and whether it matched, plus an error row when a source did not respond. • Adds `Credential details` result detail for wallet verifications: wallet identity, issuing authority, level of assurance asserted, and signature validity. • Adds `SDK_VERSION` export to `@didit-protocol/sdk-web` that now correctly reflects the installed package version in all build formats and TypeScript declarations. • Adds digital ID wallet method (MitID, BankID, itsme, Vipps, iDIN, UAE PASS, gov.br, EUDI Wallet) as a configurable option, surfaced as `Coming soon` in the console — not yet enabled for production users. • For lookup countries whose government register returns a portrait (South Africa, Nigeria, Argentina, Panama), the lookup automatically adds passive liveness and face-match — included in the lookup price — allowing downstream Liveness and Face Match workflow steps to be skipped. • Per non-document method, adds per-failure-mode switches (partial match, no match, no source response, wallet cancelled/timed out) that route the user to document capture or decline the session. • Lookup retry count is configurable from one to five attempts (default two); only attempts the source actually answered are counted and billed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Wed, 09 Sep 2026 07:39:46 GMT Didit: Exposes verification method and assurance tier through the decision API and session objects; document sessions report `documentary` and leave new fields empty. • Adds non-document lookup as a new ID Verification method — user supplies a national ID number and personal details checked against a government register or credit/financial/utility/residential-records source, with no photograph or upload required. • Adds per-country method controls on the 'Countries' tab of the ID Verification step, toggling document capture, non-document lookup, and (future) digital ID wallets on or off per country; same settings available through the API. • Adds automatic selfie, passive liveness, and portrait matching to non-document lookups for countries whose government register returns a photograph (South Africa, Nigeria, Argentina, Panama), included in the lookup price. • Adds configurable fallback behavior for each non-document method failure mode (partial match, no match, no source response, cancelled/timed-out wallet sign-in) — each either sends the user to document capture or declines the session. • Adds retry configuration for non-document lookups: one to five attempts (default two), counting only attempts the source actually answered; format-check failures never reach the source and are not billed. • Embedded SDK mode now fills the host element's content box instead of inheriting the modal's height cap. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/openapi-25.json https://docs.didit.me/openapi-25.json Mon, 07 Sep 2026 13:48:16 GMT API surface changed: +2 endpoints, 4 modified • New endpoint POST /v3/kyb/shareholders/ • New endpoint POST /v3/kyb/ubo/ • GET /v3/session/{sessionId}/decision/: response schema changed • POST /v3/kyb/select/: response schema changed • POST /v3/poa/: response schema changed • POST /v3/users/delete/: request body changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog.md https://docs.didit.me/changelog.md Mon, 07 Sep 2026 07:33:14 GMT Didit ID Verification gains non-document national-ID lookup and a digital-wallet method path, selectable per country. • Adds `status.updated` webhook fields carrying the verification method (`Documentary`, `Data match`, or `Cryptographic`) and the corresponding assurance tier for every ID Verification session. • Adds non-document lookup as a second ID Verification method: the user supplies their national ID number and personal details, which are checked against a government register or credit-bureau/financial-services/utility/residential-records source — no photograph or upload required. • Adds digital ID wallet support to the ID Verification method roadmap (MitID, BankID, itsme, Vipps, iDIN, UAE PASS, gov.br, and EUDI Wallet), configurable as `Coming soon` in the console but not yet live for end users. • Adds per-country method selection via the `Countries` tab on the ID Verification step and through the API, letting operators independently enable or disable document capture, non-document lookup, and digital ID wallets for each country. • Adds per-failure-mode routing switches for non-document methods — partial match, no match, no source response, and cancelled or timed-out wallet sign-in — each directing the user to document capture or declining the session. • Adds configurable retry count (one to five attempts, default two) for non-document lookups, counting only attempts the source actually answered. • Adds automatic selfie capture, passive liveness, and face match to non-document lookups in countries where the government register returns a portrait (South Africa, Nigeria, Argentina, and Panama), allowing downstream Liveness and Face Match steps to be skipped. • Extends the session and decision result with a `Registry comparison` section showing each compared field, the value the user provided, the value the source held, and whether they matched, plus an error row when the source did not answer. • Extends the session and decision result with a `Credential details` section showing the wallet used, its issuing authority, the level of assurance asserted, and signature verification outcome. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/openapi-25.json https://docs.didit.me/openapi-25.json Fri, 04 Sep 2026 07:48:51 GMT API surface changed: +3 endpoints, 3 modified • New endpoint POST /v3/email/risk/ • New endpoint POST /v3/ip/risk/ • New endpoint POST /v3/phone/risk/ • GET /v3/session/{sessionId}/decision/: response schema changed • POST /v3/aml/: request body changed • POST /v3/document-ai/: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Wed, 02 Sep 2026 00:00:30 GMT Didit adds standalone risk APIs, full transaction-monitoring API, biometric-template retention, new fraud signals, and ISO age-assurance workflows. • New `/v3/transactions/rules/` Management API endpoints let you create, update, delete, and backtest transaction-monitoring rules programmatically; matching `library` and `install` endpoints manage preset rules. • Opt-in biometric-template retention after session deletion: enable via `face_retention_policy` and `face_retention_days` on `PATCH /v3/webhook/`, override per call with `retain_face_embeddings` on `DELETE /v3/session/{sessionId}/delete/` and `POST /v3/sessions/delete/`; retained templates carry a finite `expires_at` and never contain images or identity fields. • Ready-made age-assurance templates available in the workflow builder with returned data already restricted. • Five new fraud-detection signals: recycled-document-image scoring, liveness-video forensics (frame count, duplicate-frame ratio, effective frame rate), `DOCUMENT_OCCLUSION_DETECTED` for partially obscured documents, Face Match live-capture confirmation, and a pre-extraction capture quality gate. • Marketplace is now accessible in the Business Console, with per-feature engine selection in both graph and simple workflow editors. • Manual company entry added to web, iOS, and Android verification flows when a registry provider is unavailable. • Didit Copilot upgraded to a floating panel available on every console page, with inline source citations, fullscreen mobile layout, workflow-building from a description, Database Validation configuration by conversation, and questionnaire generation from a CSV or Excel file. • Support section added to the Business Console with organization-scoped tickets, live status, category/severity/session-ID reporting, attachments, human escalation in-thread, and per-ticket permalinks. Breaking changes: • `DELETE /v3/session/{sessionId}/delete/` and `POST /v3/sessions/delete/` now return `200 OK` with a JSON body (`face_retention_outcome`, `biometric_template_uuid`; per-session `results[]` for batch) instead of `204 No Content` — clients that assert on `204` must be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Tue, 01 Sep 2026 16:09:50 GMT Didit: New `/v3/transactions/rules/` Management API endpoints (create, update, delete, backtest) plus matching `library` and `install` endpoints let rules be managed programmatically, in addition to the Business Console. • New Biometric Templates API — `GET /v3/biometric-templates/`, `GET /v3/biometric-templates/count/`, `GET /DELETE /v3/biometric-templates/{template_uuid}/`, and `POST /v3/biometric-templates/delete/` — to list, count, inspect, and purge retained templates. • Sessions can now be listed ordered by `updated_at`. • New `DOCUMENT_OCCLUSION_DETECTED` result returned when a partially obscured document is detected at pixel level, translated into every supported language. • Age-assurance workflows can now return only the age decision in line with ISO/IEC 27566-1; a workflow declaring the standard cannot return identity attributes alongside the age decision. • The Age Estimation borderline band is now visible in the workflow graph, enabling routing to a document check on uncertain results. • Workflows can now route on the specific NFC skip reason when a chip is not read. • Nigeria Bank Verification Number direct BVN lookup added, gated on a selfie face match, with names as optional inputs. • Database Validation can now run from its own input sources (e.g., a selfie and a national ID number) without a document capture step. • New identity documents added: Moldova ID card (2025), Pakistan ID card (2025), Uruguay ID card (2026), Greece asylum seeker card (2025), and a third Belgium driving license variant. • Malaysia MyKad is now selectable as its own subtype rather than a generic ID card. • Extraction upgraded for Belgium, Germany, India, Israel, Madagascar, New Zealand, Norway, Sierra Leone, South Africa, and the United States. • Didit Copilot is now a resizable floating panel available on every Business Console page, with fullscreen layout on mobile and voice plus typed input support. • Copilot can build a complete workflow from a description — adding and configuring steps, branches, final-status rules — and validate before publishing. • Copilot can build a questionnaire from an attached CSV or Excel file, including very long answer lists. • Copilot can configure Database Validation by conversation for any supported country. • Copilot answers now include inline citations that open the underlying documentation without leaving the panel. • Support section added to the Business Console with organization-scoped tickets, live status, a standard tickets table, per-ticket permalinks, and escalation to a human agent in the same thread. • AI-assisted transaction-rule migration: ask the Didit assistant or any MCP-connected agent to map a rule set exported from another provider (CSV or Excel) onto Didit's rule schema, backtest it, and create rules in test mode. • Registry coverage analytics now available in Reports, showing registry search coverage and success by country and workflow version. • AML and Wallet Screening results now show the factors behind a risk score, and wallet screening gains a shareable report. • Biometric-template retention policy and stored templates are visible in App Settings and `Lists → Biometric templates`. Breaking changes: • `DELETE /v3/session/{sessionId}/delete/` and `POST /v3/sessions/delete/` now return `200 OK` with a JSON body containing `face_retention_outcome`, `biometric_template_uuid`, and per-session `results[]` for batch requests, instead of `204 No Content`. Clients that assert on `204` must be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog.md https://docs.didit.me/changelog.md Tue, 01 Sep 2026 15:08:24 GMT Didit adds standalone risk APIs, ISO/IEC 27566-1 age assurance, transaction-monitoring rule management, and biometric-template retention. • New `POST /v3/document-ai/` endpoint extracts structured data from any uploaded document, not just identity documents, and accepts uploads up to 50 MB. • New `POST /v3/email/risk/`, `POST /v3/phone/risk/`, and `POST /v3/ip/risk/` endpoints return standalone risk signals for an email address, phone number, or IP address, each priced per call. • New `/v3/transactions/rules/` Management API endpoints let you create, update, delete, and backtest transaction-monitoring rules; matching `library` and `install` endpoints manage preset rules from the rule library. • Nine `didit_transaction_rule_*` MCP tools expose the same list, create, update, delete, backtest, and library workflows to any MCP-connected AI agent. • Registry-search outages now return HTTP `502` with `code: 'kyb_registry_provider_unavailable'` so integrations can react programmatically. • Phone provider outages now return HTTP `502` with `code: 'phone_provider_unavailable'` for the same purpose. • Sessions can now be listed and ordered by `updated_at` to surface recently imported or modified sessions. • A partially obscured document is now detected at pixel level and returns `DOCUMENT_OCCLUSION_DETECTED` in every supported language. • Biometric-template retention lets applications keep one image-free face template after a session is deleted, keeping duplicate detection active after session data is purged; the policy is visible and configurable under Settings > Lists > Biometric templates. • Age-assurance workflows now support ISO/IEC 27566-1: a workflow that declares the standard cannot return identity attributes alongside the age decision, and an Age Estimation borderline band is exposed to the workflow graph for routing uncertain results to a document check. • Idempotency keys are now supported on the AML API, so a retried screening request is never charged or screened twice. • Nigeria Bank Verification Number (BVN) is a new Database Validation source, gated on a selfie face match. • Database Validation can now run without a document capture step — each field can draw from its own input source (e.g., selfie plus a national ID number). • New Marketplace section in the Business Console lets you browse and enable partner modules. • Per-feature engine selector in the workflow editor (graph and simple) lets you choose which engine runs each individual check, and the choice persists across both editor types. • Firearm licenses are now a selectable document category, covering Victoria (Australia) and Illinois, Massachusetts, and two New Jersey permits (United States). • Digital driving licenses added for Argentina (Mi Argentina and Jujuy) and Australia (New South Wales including provisional, South Australia including learner, and Victoria including heavy vehicle). • ePassport trust store expanded to 136 issuing countries, with new signing-certificate generations for 32 of them; workflows can now route on the specific NFC skip reason. • Barcode on North American driving licenses now reports its signed fields with each signature validated against its certificate's validity window. • Every manual transaction status change is attributed to the console user who made it. • AI-assisted rule migration lets the Didit assistant (or any MCP-connected agent) accept a rule set exported as CSV or Excel from another provider, map it to Didit's rule schema, backtest it against your own transaction history, and create the rules in test mode. • Copilot becomes a floating, resizable panel available on every Business Console page, with inline source citations, fullscreen mobile layout, CSV/Excel-to-questionnaire conversion, and the ability to build and validate a complete workflow from a natural-language description. • Support is now built into the Business Console: organization-scoped tickets with live status, category/severity/session-ID filing, attachment support, human escalation in the same thread, and per-ticket permalinks. • French overseas departments are now searchable in the French company registry. • Registry coverage analytics by country and workflow version are now available in Reports. Breaking changes: • Session deletion behavior has changed: applications that relied on full session data persisting after deletion must adopt the new biometric-template retention policy, as session data is now purged while only an image-free face template may be retained. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Tue, 01 Sep 2026 07:37:15 GMT • Adds `face_retention_policy` and `face_retention_days` fields on `PATCH /v3/webhook/` to configure opt-in biometric-template retention at the application level, keeping image-free face embeddings anchored to a User after session deletion so duplicate detection, Face Search, and biometric authentication continue working. • Adds `/v3/transactions/rules/` Management API endpoints to create, update, delete, and backtest transaction-monitoring rules programmatically, plus `library` and `install` endpoints to browse, install, and remove preset rules from the rule library. • App Settings → Data now exposes a 'Retain biometric template' toggle with a required finite retention period field for configuring biometric-template retention via the Business Console. Breaking changes: • `DELETE /v3/session/{sessionId}/delete/` and `POST /v3/sessions/delete/` now return `200 OK` with a JSON body containing `face_retention_outcome`, `biometric_template_uuid`, and per-session `results[]` (for batch), instead of `204 No Content` — clients that assert on `204` must be updated. • `POST /v3/users/delete/` now purges the user's retained biometric templates before deleting the user, and returns `503` (retryable, nothing deleted) if a template cannot be purged. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/openapi-25.json https://docs.didit.me/openapi-25.json Mon, 31 Aug 2026 20:49:30 GMT • New endpoint DELETE /v3/biometric-templates/{template_uuid}/ • New endpoint GET /v3/biometric-templates/ • New endpoint GET /v3/biometric-templates/count/ • New endpoint GET /v3/biometric-templates/{template_uuid}/ • New endpoint POST /v3/biometric-templates/delete/ • GET /v3/session/{sessionId}/decision/: response schema changed Breaking changes: • DELETE /v3/session/{sessionId}/delete/: request body changed; response schema changed • POST /v3/sessions/delete/: request body changed; response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog.md https://docs.didit.me/changelog.md Mon, 31 Aug 2026 20:33:11 GMT Didit adds biometric-template retention after session deletion, a full Biometric Templates API, and privacy-erasure controls. • Adds `face_retention_policy` and `face_retention_days` fields on `PATCH /v3/webhook/` to configure biometric-template retention at the application level, keeping image-free face embeddings alive for duplicate detection, Face Search, and biometric authentication after session data is purged. • Adds `retain_face_embeddings` parameter on `DELETE /v3/session/{sessionId}/delete/` and `POST /v3/sessions/delete/` to override the application-level retention policy on a per-call basis. • Adds UI control 'Retain biometric template' (with a required finite retention period) in App Settings → Data to enable biometric-template retention. • New Biometric Templates API: `GET /v3/biometric-templates/`, `GET /v3/biometric-templates/count/`, `GET /v3/biometric-templates/{template_uuid}/`, `DELETE /v3/biometric-templates/{template_uuid}/`, and `POST /v3/biometric-templates/delete/` for listing, counting, inspecting, and purging retained templates — every retain and purge is audited. • Adds `deletion_instruction: "privacy_erasure"` (with `instruction_id`) on session deletion to purge all retained biometric templates for a person regardless of application policy. • Face Search match results now include `source: "retained_template"`, `vendor_user_id`, and `biometric_template_id` for hits on retained templates, and `vendor_user_id` on session and imported matches. • `POST /v3/users/delete/` now purges a user's retained biometric templates before deleting the user, and returns `503` (retryable, nothing deleted) if a template cannot be purged. Breaking changes: • `DELETE /v3/session/{sessionId}/delete/` and `POST /v3/sessions/delete/` now return `200 OK` with a JSON body (`face_retention_outcome`, `biometric_template_uuid`; per-session `results[]` for batch) instead of `204 No Content` — clients that assert on a `204` response will break and must be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Mon, 31 Aug 2026 07:40:49 GMT Didit adds REST API and MCP tool management for transaction-monitoring rules, plus AI-assisted rule migration from external providers. • New `/v3/transactions/rules/` Management API endpoints let you create, update, delete, and backtest transaction-monitoring rules programmatically, with matching `library` and `install` endpoints for browsing, installing, and removing preset rules from the rule library. • New AI-assisted rule migration workflow lets the Didit assistant (or any MCP-connected agent) map a rule set exported from another provider (CSV or Excel) onto Didit's rule schema, backtest it against your transaction history, and create the rules in test mode for review before activation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/openapi-25.json https://docs.didit.me/openapi-25.json Fri, 28 Aug 2026 19:45:25 GMT API surface changed: +23 endpoints, 2 modified • New endpoint DELETE /v3/transactions/rules/install/ • New endpoint DELETE /v3/transactions/rules/{rule_uuid}/ • New endpoint GET /v3/organization/{organization_id}/application/{application_id}/business-sessions/{business_session_id}/networks/ • New endpoint GET /v3/organization/{organization_id}/application/{application_id}/businesses/{vendor_business_uuid}/networks/ • New endpoint GET /v3/organization/{organization_id}/application/{application_id}/networks/ • New endpoint GET /v3/organization/{organization_id}/application/{application_id}/networks/{network_uuid}/ • New endpoint GET /v3/organization/{organization_id}/application/{application_id}/networks/{network_uuid}/graph/ • New endpoint GET /v3/organization/{organization_id}/application/{application_id}/networks/{network_uuid}/map/ • New endpoint GET /v3/organization/{organization_id}/application/{application_id}/networks/{network_uuid}/members/ • New endpoint GET /v3/organization/{organization_id}/application/{application_id}/networks/{network_uuid}/signals/ • New endpoint GET /v3/organization/{organization_id}/application/{application_id}/networks/{network_uuid}/timeline/ • New endpoint GET /v3/organization/{organization_id}/application/{application_id}/sessions/{session_id}/networks/ • New endpoint GET /v3/organization/{organization_id}/application/{application_id}/transactions/{transaction_uuid}/networks/ • New endpoint GET /v3/organization/{organization_id}/application/{application_id}/transactions/{transaction_uuid}/parties/{transaction_party_uuid}/networks/ • New endpoint GET /v3/organization/{organization_id}/application/{application_id}/users/{vendor_user_uuid}/networks/ • New endpoint GET /v3/transactions/rules/ • New endpoint GET /v3/transactions/rules/library/ • New endpoint GET /v3/transactions/rules/{rule_uuid}/ • New endpoint PATCH /v3/transactions/rules/{rule_uuid}/ • New endpoint POST /v3/transactions/rules/ • New endpoint POST /v3/transactions/rules/backtest/ • New endpoint POST /v3/transactions/rules/install/ • New endpoint POST /v3/wallet-screening/pdf/ • POST /v3/aml/: param Idempotency-Key (header) added • POST /v3/wallet-screening/: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog.md https://docs.didit.me/changelog.md Fri, 28 Aug 2026 19:34:49 GMT Didit adds a `/v3/transactions/rules/` Management API, nine MCP tools, and AI-assisted rule migration for transaction monitoring. • Adds `/v3/transactions/rules/` Management API endpoints to create, update, delete, and backtest transaction-monitoring rules programmatically, complementing the Business Console. • Adds `library` and `install` endpoints under `/v3/transactions/rules/` to browse, install, and remove preset rules from the rule library. • Introduces nine `didit_transaction_rule_*` MCP tools covering list, create, update, delete, backtest, and library workflows for any MCP-connected AI agent. • Adds AI-assisted rule migration: the Didit assistant (or any MCP-connected agent) can ingest a rule set exported from another provider (CSV or Excel), map it to Didit's rule schema, backtest it against your transaction history, and create the rules in test mode for review before activation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/openapi-25.json https://docs.didit.me/openapi-25.json Thu, 20 Aug 2026 14:19:43 GMT API surface changed: +1 endpoint • New endpoint POST /v3/document-ai/ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog https://docs.didit.me/changelog Sat, 15 Aug 2026 09:05:17 GMT Didit adds barcode fields to Session API, `kyc.marital_status` branch support, KYB/phone 502 error codes, and React Native 0.77 TurboModule support. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/openapi-25.json https://docs.didit.me/openapi-25.json Fri, 14 Aug 2026 09:55:30 GMT API surface changed: +1 endpoint, 3 modified • New endpoint PATCH /v3/session/{sessionId}/kyb/parties/{partyUuid}/ • POST /v3/kyb/search/: response schema changed • POST /v3/phone/check/: response schema changed • POST /v3/phone/send/: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog.md https://docs.didit.me/changelog.md Fri, 14 Aug 2026 09:22:37 GMT Didit adds barcode data to session responses, new `kyc.marital_status` branch field, and 502 error codes for KYB/phone outages. • Retrieve-session responses now include `id_verifications[].barcodes`, with each entry exposing `type`, `position`, `data`, `data_raw`, and `side`; documents without barcode output return an empty array. • Face-step payloads now always include `face_liveness_method`; workflows that do not set it explicitly receive `PASSIVE` from the API. • Adds `kyc.marital_status` as a usable field in workflow branch conditions. • KYB registry-search outages now return `502` with `code: 'kyb_registry_provider_unavailable'`, enabling integrations to offer manual company entry or a retry. • Phone-verification provider outages now return `502` with `code: 'phone_provider_unavailable'`. • Web, iOS, and Android verification flows now offer manual company entry when the KYB registry provider is unavailable. • French 2021 ID cards can now be read and validated via the ANTS 2D-Doc Data Matrix on Web, iOS, and Android. • Console copilot can now create a configured Database Validation step for supported countries. • Compliance country questions in the console now group countries by continent and support selecting or clearing an entire continent at once. • Prepaid credits now use charge discounts instead of bonus credits: 4% at $250 and 7% at $1,000. • React Native SDK 4.5.4 adds iOS dSYM artifacts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog.md https://docs.didit.me/changelog.md Sat, 01 Aug 2026 18:30:01 GMT Didit adds Travel Rule compliance, Console Copilot, Test mode sandbox, device integrity attestation, and expanded KYB/AML capabilities. • Adds end-to-end Travel Rule compliance: encrypted IVMS 101 sender/recipient exchange, TRP messaging, secure email fallback, VASP directory, self-custody wallet ownership proof, and preset EU Transfer of Funds Regulation rules. • Introduces Didit Copilot in the Business Console — a resizable AI panel that builds workflows, applies filters, and navigates dialogs via natural language, voice input, or file attachment, with explicit confirmation gates for writes/deletes. • New applicant ID Verification Data Review step lets users confirm or correct extracted document fields before submission, with configurable outcomes by mismatch severity, MRZ-protected fields, and full correction history in session details. • Adds complete Test mode for sandbox applications: choose approved/declined/in-review scenarios, upload sample documents, enter any OTP, and assert the armed scenario via `sandbox_scenario` in the v3 decision payload — no external providers contacted. • New Device & Capture Integrity signals: Apple App Attest and Google Play Integrity attestation, frame injection detection with attack subtype reporting, virtual-camera risk flagging, and per-workflow policy actions (decline/review/record). • Business Verification (KYB) adds EU VAT validation via VIES, configurable company-search field prefill/lock, local business document names in 103 countries, Document AI extraction results in KYB payloads and PDF reports, and file uploads up to 30 MB. • Ongoing AML monitoring can now be enabled or disabled per user or business record directly from the Users and Businesses tables, with cost preview before enabling, deduplication of monitored records, and transparent bulk-job skip reasons. • Transaction monitoring now supports native SDK submission with device intelligence attached, biometric one-selfie step-up remediation, sender/receiver field comparison in rules, and custom lists in text rules. • Native SDKs (versions 4.0.9–4.5.3) add transaction submission/retrieval with automatic user actions, wallet-ownership proof, Swift Package Manager support for iOS in React Native and Flutter, modular Flutter variants (`didit_sdk_core`, `didit_sdk_autodetection`, `didit_sdk_nfc`), and Arabic RTL + Hebrew localization. • AI extraction expanded to Israeli and Kyrgyzstani documents, German health insurance cards, New Jersey IDs, Pennsylvania commercial driving licences, Australia's Larrakia Nation ID Card, and Northern Territory Proof of Identification Card. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit https://docs.didit.me/changelog.md https://docs.didit.me/changelog.md Mon, 13 Jul 2026 10:07:10 GMT Didit June 2026: Document AI custom verification, MCP Server v5, PACE NFC on Android, new transaction rule operators, and brand import. • New Document AI Verification: define custom document types (contracts, licenses, certificates) with configurable extraction fields — no template required — and results are returned via decision/events endpoints and webhooks. • Auto-suggest extraction fields by uploading a sample document; the AI proposes fields for you directly in the workflow builder. • Document AI results surface in a dedicated Console section on session details, showing every extracted field, and full-name fields can be matched against the verified identity. • Document AI custom verification step available natively on iOS, Android, React Native, and Flutter (SDK 4.0.7+). • PACE NFC support on Android: passports and IDs protected with PACE can now be read over NFC. • New Social Security Card document type supported across iOS, Android, React Native, and Flutter SDKs. • AI-powered data extraction enabled for ~300 additional document types, focused on Arabic-speaking countries and historically lower-accuracy document types. • Transaction detail page redesigned with counterparty flow cards, state-aware rule rows, paginated related-transactions table, and threshold-colored score pill. • Transaction rule engine adds date comparisons, regex matching, fuzzy matching, and `in` (list match) operators — available in both the API and Console rule editor. • Real-time updates for transaction lists and detail views — no manual refresh needed. • MCP Server v5.0.0: ships with a registry manifest and Cursor plugin, aligned with OpenAI app review guidelines for marketplace installation. • Scoped access tokens for MCP agents: agents exchange credentials for narrowly-scoped tokens via standard token-exchange flow. • White-label brand import: enter your website URL and Didit automatically detects your logo, colors, and fonts and maps them onto the verification flow. • New Notifications preferences matrix in Account Settings: per-event, per-channel toggles, test-notification firing, Slack disconnect, and throttled webhook-failure alerts (max one per 30 minutes). • Organization-level list API: query sessions, businesses, transactions, and cases across all applications in your organization, with each record attributed to its application. • Column-visibility toolbar added to Users and Businesses tables in the Console. • Field blurring for data minimization now available for all countries (previously EU-only). • CSV imports now report row-level errors before committing, and imported records carry an 'Imported' badge. • Console sessions remain active for ~30 days via silent renewal. • Business Console now available in Italian. • Published questionnaires can now be renamed. • Questionnaire fields validate format inline as the user types, with inline error messages. • Guided post-signup onboarding wizard and self-driving guided tour added. • Demo environment seeded with 1,000+ realistic sessions for Console exploration. • Sandbox template gallery: select a test persona to auto-set country and document type. • Changing your password now signs out all other active Console sessions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/didit