Changelog
Product and platform updates across Voidnet and VoidAI. Filter by audience.
Stay up to date with the latest changes across the Voidnet ecosystem.
v1-beta gateway is live
The POST /v1-beta/{adapter}/{username}/{appname} endpoint is live. Only the mcp adapter is available; a2a and llm are not yet supported. SSE streaming (GET) and session terminate (DELETE) are supported for mcp.
OAuth 2.0 authorization server
Built-in OAuth 2.0 authorization server at POST /oauth/token using the client_credentials grant. Exchange an API key for a short-lived JWT (RS256). Well-known metadata at /.well-known/oauth-authorization-server (RFC 8414), /.well-known/oauth-protected-resource (RFC 9728), and /.well-known/jwks.json.
VoidAI keys supported
Voidnet now accepts vai-sk- API keys alongside vnb-sk-. Ambient key support for integrated workflows.
Scope enforcement
Protocol adapters enforce scope prefix. A mcp: scope allows all MCP methods; an empty scope (legacy keys) remains unrestricted.
Correct MCP session forwarding
initialize now forwards to the publisher and returns real capabilities instead of synthetic ones. notifications/initialized is forwarded to the publisher instead of silently consumed. Uninitialized sessions are auto-initialized before method calls.
Security hardening
Body size limits enforced on all requests. Log gating for sensitive information. Encryption at rest for publisher API keys. Suspended buyer accounts rejected at the database level for all auth flows.
Stripe billing
Stripe webhook integration for payment processing. Subscription and one-time payment flows. Tiered pricing (free and paid) with automatic meter enforcement.