API names
Public documentation now groups messaging operations under Messaging API, organization and project automation under Platform API, and instance administration under Enterprise API. Endpoint paths, credential formats, and version headers are unchanged.Account security
Account settings now support multiple verified email addresses and a primary sign-in address. Authentication settings combine passkeys, authenticator-app verification, social connections, browser sessions, Inspector sessions, and command-line sessions in one place. See Security. If a session check fails repeatedly, the Console now stops retrying and gives you actions to retry the check or return to sign in.Team and project settings
Team and project API keys now share the Settings experience while preserving their separate authority. Team settings also provide webhook endpoint management, including event selection, delivery format, signing-secret rotation, and retry controls. See API keys and Webhooks.Moving a Sandbox project to Live now uses a production enrollment checklist for business details, expected traffic, recipient consent, and the credit requirement shown in Checkout. See Project stages.Privacy controls
Analytics remain disabled until you allow them. Use Cookie settings in the site footer to change the choice later; essential account and security cookies remain enabled.Embedded signup
Added public Platform API operations to read and update organization or project embedded-signup settings atGET /v1/widget and PUT /v1/widget. See
Manage saved settings.The hosted widget loader at /widget/embed.js remains publicly available
when Meta-compatible Messaging API routes are enabled. Project credentials
can cancel only widget sessions owned by the same project.Platform API
Platform API operations identify whether they accept an organization key or require a signed-in Console session. Message-template operations require explicit project context. Their responses useid and createdAt
consistently, and template lists are bounded to 500 drafts.
Template, organization, and member changes verify current owner or admin
authority. See Platform API.Session management
Added typed public Platform API operations for stopping, removing, and updating sessions; stopping or removing up to 100 sessions in one request; and creating testing numbers. Testing numbers support US, GB, BR, and IN formats. See Session-management operations.Session tier overrides now use the number-tier namesfree, standard,
pro, and scale. Team-plan names are not accepted as number tiers.Widget handoff state responses now use Cache-Control: no-store so browsers
and shared caches do not retain the QR or session status. See
Cross-device handoff.Inspector authorization
Inspector authorization now confirms the signed-in account and organization before accepting a device code. The approval review shows the requesting app, request time, available city and IP information, selected organization, and active projects. See Install Polymorfa Inspector.Account and onboarding
Social sign-in no longer creates an account implicitly; social account creation starts from sign-up. Onboarding now offers English and Brazilian Portuguese, previews available languages, and shows each team once in the team switcher.Added the date-pinned
Titan-Version request header. The header keeps its
existing name for compatibility after the Polymorfa product rename.