Changelog
Notable changes to the Stile API, SDKs, and docs.
Notable customer-facing changes, newest first. Internal fixes and refactors are omitted.
Stay current with one prompt
Building with an AI assistant? Point it at the always-current
llms-full.txt — see Build with
AI.
June 2026
Single environment. Collapsed test/live into one live environment with a free tier (100 verifications/month by default) and an org-level sandbox mode for testing. Removed the livemode field and the _test_/_live_ key prefixes — keys are now just stile_sk_… / stile_pk_…. Legacy keys keep working.
Documentation overhaul. Docs were brought current with the workflow-era API and rebuilt to a fuller standard: new Concepts section, SDK overview, diagrams throughout, and machine-readable llms.txt / llms-full.txt / openapi.yaml for AI tooling.
Credit-based billing. Added prepaid cash credits alongside usage billing. The free tier (100 verifications/month by default) covers your first verifications each calendar month; beyond that, usage draws down prepaid credits. Failed verifications are never charged.
May 2026
js.stile.id CDN. The widget launcher now ships from a dedicated CDN at https://js.stile.id/v1/stile.js — a ~7 KB script that registers <stile-frame> with the heavy verification UI running inside the hosted iframe.
Widget session-url mode. The widget can now mint sessions through an endpoint on your backend — the recommended production pattern. The widget POSTs to your session-url, your server creates the session with the secret key, and the modal opens with the result. See the Widget SDK.
Webhook delivery hardening. Dispatch failures are now surfaced and recovered through the retry scheduler rather than swallowed silently. See Webhooks.
Trust Reuse. Launched cross-operator verification reuse: a user who verified at one operator can, with explicit consent, be recognized at another — no re-verification. See Trust Reuse.
Returning-user OTP gate. Added a per-workflow email-OTP gate for returning users, with hybrid VP-token / OTP redemption so reuse is both fast and ownership-proven. See Returning Users.
Workflow-first session creation. Verification sessions now run inside a published workflow: POST /v1/verification_sessions takes a required workflow_id and the workflow is the single source of truth for methods, jurisdictions, and the use case. A per-request methods array is no longer accepted.