# Changelog

What changed in the API, newest first. Within v1 changes are only additions: new fields, enum values and reason codes. Nothing is renamed or removed.

## 2026-10-30

- Retired before launch: the message and screenshot checks (POST /v1/check/message, POST /v1/check/screenshot and the MCP tools check_message and check_screenshot) now answer 410 with the code gone. Bewary answers about entities: send each link, number, address, wallet, IBAN, app or payment handle to its lookup, or a new account's contact points to POST /v1/assess (contract 1.7.0).
- Contract 1.5.0: a brand watch's lookalike events also cover names on an abused TLD (brand_tld), names spelled with look-alike characters (homoglyph) and names that mix alphabets (mixed_script).
- Contract 1.4.0: watches, events and signed webhooks for domains, phone numbers, wallets and brands (POST /v1/watches, GET /v1/events).
- Related domains: GET /v1/domain/{host}/related lists the domains that share an address, name servers, a certificate, a registration or a page template, each with its evidence.
- New lookups: GET /v1/iban, GET /v1/app and GET /v1/payment-handle, also in batches and on the MCP server.
- Bulk files of the scam lists, backtests of a list you already hold, and billing settings.
- Domain lookups add status, registry holds, the web archive, when Bewary and public lists first saw the host, and our calibrated verdict on the site (site.p_scam_site). Links add the shortener's own state and platform takedowns. Throwaway email domains add whether they still take mail.

## 2026-10-29

- Contract 1.3.0: POST /v1/assess checks a new seller's or profile's contact points in one call and returns one decision.
- Contract 1.2.0: a number that complaints name only as the caller ID of unwanted calls carries PHONE_REPORTED_CALLER_ID, a caution, and is no longer listed. Callers can fake a caller ID.

## 2026-10-24

- Contract 1.1.0: listed entries carry where they come from and the countries they are aimed at (the geo mark).

## 2026-10-23

- The OpenAPI spec now types every response: Envelope, Entity, facts per entity type, Signal, BatchResponse and ErrorResponse. TypeScript and Python types are published at /types.
- MCP tools declare an outputSchema, and results carry structuredContent.
- Email lookups always report mx, disposable addresses included.
- Wallet lookups report chain.
- Domain lookups report the registration date of well-known domains too.
- Every parameter has a description in the spec.
- Domain lookups report registrar and the new expires_at (both from RDAP).

## 2026-10-22

- v1 launched: lookups for links, domains, IP addresses, phone numbers, SMS short codes, email addresses and wallets, message and screenshot checks, batch lookups, API keys and the MCP server.
- Contract frozen at 1.0.0.