Changelog

Product Changelog & Engineering Updates

We are pre-launch and building in public. That includes the entries where something was wrong and we fixed it — a changelog that only contains good news is a marketing page.

0.7.210 October 2026
Official TypeScript & Python SDKs Live on npm & PyPI
Official zero-dependency TypeScript and Python client SDKs (sadasend) published and live on npm and PyPI with discriminated union results, auto-idempotency, and server-enforced guardrails.
- AddedPublished and announced official zero-dependency TypeScript SDK on npm (`npm install sadasend` / `bun add sadasend`) with native Fetch/WebCrypto support across Node.js, Bun, Deno, and Cloudflare Workers.
- AddedPublished and announced official zero-dependency Python SDK on PyPI (`pip install sadasend` / `uv add sadasend`) with standard-library urllib/hmac implementation for Python 3.9+.
- ChangedSynchronized documentation (/docs/sdks), quickstart snippets, Connect dialogs, and code snippet showcase to reflect live SDK availability across npm and PyPI.
- ChangedRemoved legacy pre-release disclaimers and Coming Soon tags site-wide, establishing official SDKs alongside REST API, SMTP Port 587, and hosted MCP tools.
0.7.110 October 2026
Public Documentation Beta, Remote MCP Server Highlighting & Free Diagnostics
Official documentation tagged as Public Beta with 6,000 monthly free sends, prominent hosted MCP server integration guides, and transparent SDK roadmap disclosures.
- AddedTagged developer documentation (/docs) as Public Beta with live REST API, Port 587 ESMTP submission relay, and hosted MCP tools for autonomous AI agents.
- AddedProminently highlighted the remote Model Context Protocol (MCP) server at https://mcp.sadasend.com with streamable HTTP/SSE and 10 safe email tools.
- ChangedDocumented upcoming official client SDKs (sadasend on npm & PyPI) marked as Coming Soon with zero runtime dependencies, alongside immediate native fetch, cURL, and hosted MCP server guides.
- FixedSynchronized pricing tier figures site-wide to canonical $12 Starter, $19 Pro, and $79 Scale plans across all commercial landing pages and comparison cards.
0.7.03 October 2026
Content Security Policy, Bot Defense & Authentication Hardening
Enterprise edge security headers, action-bound Turnstile validation on magic links, and strict fail-closed WebAuthn authentication.
- SecurityEnforced comprehensive Content-Security-Policy (CSP) headers at the edge, blocking cross-site scripting and unauthorized iframe framing.
- SecurityStrengthened Cloudflare Turnstile bot verification on magic-link requests and resends with server-side action validation.
- SecurityEnforced fail-closed WebAuthn passkey authentication, eliminating client-side fallback bypasses.
- SecurityPurged raw TOTP Base32 HMAC secrets from local storage persistence to safeguard enrollment credentials.
- FixedIsolated telemetry and session replay strictly to marketing surfaces, guaranteeing zero third-party script execution on authenticated customer or operations portals.
0.6.07 September 2026
Webhook Simulator, API Key Expiry & Template Test Sends
Interactive testing tools for developers: live payload inspection, IP guardrails, and template test dispatching.
- AddedLive Webhook Simulator allowing developers to test payloads for email.delivered, email.bounced, and email.complained against local and remote endpoints with HMAC-SHA256 signature verification.
- AddedTemplate test send modal in /app/templates to preview Liquid and React Email variables with live inbox delivery.
- AddedAPI key expiration options (30d, 90d, 1y, custom) and CIDR IP allowlist restrictions in /app/keys.
- AddedAutomated deployment and staging smoke-test command verifying API liveness, Redis noeviction durability, and live worker queues.
0.5.06 September 2026
Domain Protection, Health Metrics & Suppression Uploads
Safeguards for sending reputation and frictionless migration from legacy email providers.
- AddedTwo-step domain deletion safeguard requiring exact domain name typing, plus 1-click domain history restoration.
- AddedDeliverability sparklines & trends on overview dashboard showing 7-day and 30-day bounce and complaint rates.
- AddedReal-time 24-hour delivery success percentage and average roundtrip latency metrics on webhook cards.
- AddedBulk suppression CSV upload tool in /app/suppressions to migrate existing suppression lists in seconds.
Preview20 August 2026
Writing, status and changelog
Six technical posts, a status page that tells the truth about pre-launch, and this page.
- AddedSix long-form technical posts on deliverability, authentication, agent safety and queue architecture.
- AddedStatus page covering the API, SMTP relay, MCP server, delivery and dashboard, with 90-day history.
- AddedThis changelog.
- ChangedStatus reports no uptime for components that have not launched, rather than a figure we did not earn.
Preview20 August 2026
Dashboard and onboarding
The full application surface, from signup to a delivered email to the logs you debug it in.
- AddedOnboarding sends a real email from a warmed sandbox domain before you touch DNS — then shows the same key being refused against a recipient outside its allowlist.
- AddedDashboard with reputation meter, showing complaint rate against the thresholds mailbox providers actually act on.
- AddedLogs with full event trail per message, plus search and resend.
- AddedAPI keys with per-key scopes, recipient allowlists, rate limits and approval mode — and an approval queue to clear held sends.
- AddedDomain verification with per-record diagnosis: what is wrong and the exact value to paste.
- ChangedPlan selection removed from signup entirely. Plans now surface only when you hit a specific limit, and name it.
- SecurityMCP server ships without create_api_key, delete_domain or remove_suppression. An agent that can mint credentials has no ceiling.
Preview20 August 2026
Site and company pages
- AddedHomepage, pricing, comparison table, and the Company pages: privacy, terms, security, contact and careers.
- AddedEvery page ships as static HTML with a markdown mirror and llms.txt, because AI crawlers do not reliably run JavaScript.
- SecuritySecurity page states plainly that we hold no SOC 2, ISO 27001 or HIPAA attestation. We would rather you find that here than in a procurement review.
- FixedStatus colours were re-picked after testing: the original warning and critical pair was indistinguishable under deuteranopia. Every status now also carries an icon and a label.

Official TypeScript & Python SDKs Live on npm & PyPI

Public Documentation Beta, Remote MCP Server Highlighting & Free Diagnostics

Content Security Policy, Bot Defense & Authentication Hardening

Webhook Simulator, API Key Expiry & Template Test Sends

Domain Protection, Health Metrics & Suppression Uploads

Writing, status and changelog

Dashboard and onboarding

Site and company pages

Official TypeScript & Python SDKs Live on npm & PyPI

Public Documentation Beta, Remote MCP Server Highlighting & Free Diagnostics

Content Security Policy, Bot Defense & Authentication Hardening

Webhook Simulator, API Key Expiry & Template Test Sends

Domain Protection, Health Metrics & Suppression Uploads

Writing, status and changelog

Dashboard and onboarding

Site and company pages