Skip to main content

ChangeLogs

All notable changes to HashDT APIs and documentation are recorded here, in reverse chronological order.

September 21, 2026​

Documentation

Added an Interactive Demo for previewing the secure card details integration.

September 16, 2026​

Breaking Change Improved

Get All Cardholders / Get Cardholder Details — Address Field Fix​

Address details are now correctly populated within individual.address. Previously, address information was only available at the top level of the response as postal_address, while individual.address was returned as null.

The top-level postal_address field is deprecated and will be removed in a future release — it is retained temporarily for backward compatibility.

Action required: Update your integration to read address details from individual.address instead of postal_address. A removal date will be announced separately.


Breaking Change

Secure Iframe — x_user_id Now Required​

The Secure Iframe URL now requires a Base64-encoded x_user_id as an additional path segment, alongside the existing card_id.This applies to both sandbox and production environments. The styles parameter and its behavior are unchanged.

Action required: Update your integration to include a Base64-encoded x_user_id in the URL path. Requests missing this parameter will fail. See the Secure Iframe Guide for the updated implementation.

September 13, 2026​

Breaking Change

Webhook APIs — Endpoint Migration​

All five Webhook API endpoints have moved to the new /hashdt/api/v1/notification/ path. Request parameters, request body, and response structures are unchanged.

MethodPrevious EndpointNew Endpoint
GET/internal/api/v1/notification/webhook/getallwebhooks/hashdt/api/v1/notification/getallwebhooks
POST/internal/api/v1/notification/webhook/api/subscribe/hashdt/api/v1/notification/subscribe
POST/internal/api/v1/notification/webhook/api/subscribedwebhook/hashdt/api/v1/notification/subscribedwebhook
PATCH/internal/api/v1/notification/webhook/api/subscribe/hashdt/api/v1/notification/subscribe
DELETE/internal/api/v1/notification/webhook/api/subscribe/hashdt/api/v1/notification/subscribe

Action required: The existing /internal/api/v1/notification/webhook/api endpoints will be deprecated effective November 1, 2026. Update your integration to the new endpoints before this date to avoid service disruption.

Documentation

September 9, 2026​

Breaking Change

PowerUp Card Program — Cardholder Age Validation​

Updated the date_of_birth validation for Create Cardholder: cardholders must now be at least 18 and under 80 years old. Previously, there was no upper age limit.

Cardholders exactly 18 years old remain eligible. Cardholders 80 years or older are no longer eligible.

Action required: Update eligibility checks for cardholders aged 80 or above before September 17, 2026. Requests that do not meet the age requirement will be rejected after this date.


Improved

Create Card — limits Now Optional​

The authorization_controls.transaction_limits.limits array in the Create Card API is now optional. Previously, this array was required on every request.

If provided, each entry in the limits array must still include both amount and interval — partial entries are not accepted.

Existing integrations that already provide limits are unaffected and continue to work as before.

August 30, 2026​

New

PowerUp Banking Program​

Introduced a unified banking solution for opening receiving accounts, managing beneficiaries, converting currencies, and sending cross-border payouts through supported payment rails.

  • Added 18 new APIs covering account management, foreign exchange and conversion, beneficiary management, and cross-border payouts.
  • Added a complete Postman Collection for PowerUp Banking APIs.
  • Added Authentication support for obtaining bearer access tokens. Tokens are valid for 30 minutes in production and 8 hours in the sandbox environment, to ease testing.
  • Added Onboarding guidance for the HashDT-managed onboarding and verification process.
Documentation
  • Added the Program Guide and Program Comparison pages to help developers choose between Core, PowerUp, and PowerUp Banking.
  • Added the Go-Live Checklist to help partners confirm production readiness across all supported programs.
  • Restructured API References into Issuing (Core Card Program, PowerUp Card Program) and Banking (PowerUp Banking Program), alongside the shared Webhook API.

August 10, 2026​

New

PowerUp Card Program​

Introduced a streamlined, recharge-first card program with simplified PIN and spend limit configuration.

  • Added 14 new APIs covering Cardholder management, Card issuance, activation, recharge, and transactions. Wallet and KYC APIs are shared with the Core Card Program.
  • Added Authentication support for obtaining bearer access tokens. Tokens are valid for 30 minutes in production and 8 hours in the sandbox environment, to ease testing.
  • Added a complete Postman Collection covering both Core and PowerUp Card Program APIs.
Documentation
  • Added the Card Status Lifecycle guide, documenting supported statuses and valid transitions for both Core and PowerUp Card Programs.
  • Added the Secure Iframe Guide, covering PCI-compliant rendering of sensitive card details (card number, expiry, CVV).
  • Restructured API References into Core Card Program, PowerUp Card Program, and shared Webhook/KYC/Wallet sections.
  • Added the Program Comparison table to help developers choose between Core and PowerUp.

June 20, 2026​

Updated
  • Updated the Get Card Transactions response message to "Card Transaction History".
  • Updated the Get Wallet History response message to "Wallet Transaction History".

April 10, 2026​

Documentation
  • Added a Postman Collection for Core Card APIs to simplify API testing.
  • Added the API Playground (Try It Out) for Core Card APIs, enabling in-browser API testing.

February 1, 2026​

Initial Release
  • Initial release of HashDT APIs and documentation.
  • Core Card Program launched — Cardholder, KYC, Wallet, Cards, Transfer, PIN, Spend Limit, and Transaction APIs.
  • Webhook support for real-time event notifications.
  • Sandbox environment and API keys available for testing.