Changelog
New features, improvements, and fixes — newest first.
Portal polish & API response consistency
Pass create and update responses now consistently return pass_type and push_errors. Reseller sub-account invite emails, credential rotation, and usage endpoints are fully documented in the API reference, OpenAPI spec, and llms.txt. Portal UI updated with a new icon and consistent checkbox styling throughout.
Onboarding checklist for new accounts
New direct accounts and resellers now see a contextual onboarding card in the dashboard on first login. The checklist walks through uploading credentials, reading the API docs, and issuing a first pass — with progress tracked automatically as each step is completed.
Reseller sub-account management API
Agency accounts can now fully manage sub-accounts via API: create, list, delete, rotate API keys, set per-sub credentials, and query monthly credit usage. Sub-accounts inherit parent credentials by default and are automatically provisioned with 100,000 credits per month.
Reseller & agency accounts
Agency plan accounts can now create and manage multiple sub-accounts under a single parent. Sub-accounts share the parent's Apple and Google credentials by default, or can be assigned their own. Each sub-account receives a separate API key and isolated pass namespace.
Pass designer — visual template builder
Design pass templates visually in the portal without writing JSON. The designer supports all pass types, live Apple Wallet preview, field drag-and-drop, background and logo image upload, and named templates you can reference at pass creation time via template_id.
Credit-based billing with monthly reset
Usage is now tracked per account as credits — one credit per pass created or updated. Credits reset on a rolling 30-day cycle. Accounts can purchase bonus credit packs that carry over month-to-month. Trial accounts include 500 credits to get started without a payment method.
Unified pass_type — one type for both platforms
Send pass_type: "loyalty" and WalletPass API automatically maps to Apple's storeCard and Google's loyalty class. No platform-specific knowledge required.
Webhooks with HMAC-SHA256 signatures
Real-time event delivery for pass.created, pass.updated, pass.deleted, device.registered, device.unregistered, and batch.completed. All payloads signed with HMAC-SHA256 and retried up to 5 times with exponential backoff.
Management portal with pass designer
A full web portal for managing credentials, designing passes visually, reviewing API logs, and monitoring device registrations — no code required.
WalletPass API — public launch
Apple Wallet and Google Wallet pass creation and management via a single REST API. Batch creation, push notifications, location triggers, and AES-256 encrypted credential storage — built on Cloudflare Workers for global edge performance.