Changelog

POST /v1/keys now only creates the first key for a new email. For an email that already has an account it returns 409 Conflict, and further keys are created from the signed-in dashboard. Signing up with an email first used through the API no longer fails.

A configuration bug meant WCAG 2.2 AA scans also ran best-practice rules, even when best practices were not requested, and WCAG 2 AAA scans ran no AAA rules. Both now run the correct rule set. Default scans no longer count best-practice issues, so scores on many sites will rise from this date. That change reflects the fix, not a change to your site. Turn on best practices to include them again.

Added FAQPage structured data on the landing page and WebAPI schema on the docs page for better search engine visibility.

Every public page now includes per-page OpenGraph and Twitter Card metadata with a custom OG image for richer social sharing.

API responses now include appropriate cache headers, unique request IDs for tracing, and a calendar-month rate limiter for more predictable billing cycles.

Strengthened server-side request forgery protections, added configurable scanner concurrency limits, and introduced scan timeout controls.

API docs now feature a copy-to-clipboard button on all code blocks, a scroll-spy sidebar for quick navigation, and a mobile-friendly docs nav.

Dashboard routes now show loading skeletons during data fetching and gracefully handle errors with a dedicated error boundary.

The scan history page now supports pagination, URL search, and status filtering for easier navigation of large scan lists.

Violations now display relevant European Accessibility Act obligation details alongside WCAG guideline mappings.

Resolved an N+1 query issue in crawl results, fixed a curl example bug in the API docs, and extracted reusable StatusBadge and formatDate utilities.

Fixed several build-time issues: lazy-initialised Paddle and Resend clients to prevent crashes without API keys, marked API routes as force-dynamic, and resolved shared package import paths for webpack compatibility.