CHANGELOG.md

@turnkey/sdk-server

5.0.0

Major Changes

• #1153 78ec1d9 Thanks @moe-dev! - Update as per mono v2025.12.3.

  Breaking/Behavioral Changes

  • appName is now required:
    • In emailCustomization for Email Auth activities
    • At the top-level intent for OTP activities
  • Auth proxy endpoints are not affected

  Activity Version Bumps

  The following activity types have been versioned:

  • ACTIVITY_TYPE_INIT_OTP → ACTIVITY_TYPE_INIT_OTP_V2
  • ACTIVITY_TYPE_INIT_OTP_AUTH_V2 → ACTIVITY_TYPE_INIT_OTP_V3
  • ACTIVITY_TYPE_EMAIL_AUTH_V2 → ACTIVITY_TYPE_EMAIL_AUTH_V3
  • ACTIVITY_TYPE_INIT_USER_EMAIL_RECOVERY -> ACTIVITY_TYPE_INIT_USER_EMAIL_RECOVERY_V2

Patch Changes

• #1145 dbd4d8e Author @moeodeh3 - Stamp function improvements

  • Queries: add organizationId fallback from config
  • Activities: fix request structure to include the parameters wrapper, organizationId, timestampMs, and type fields

• Updated dependencies [78ec1d9]:

  • @turnkey/http@3.16.0
  • @turnkey/wallet-stamper@1.1.10

4.12.2

Patch Changes

• Updated dependencies []:
  • @turnkey/wallet-stamper@1.1.9

4.12.1

Patch Changes

• Updated dependencies []:
  • @turnkey/wallet-stamper@1.1.8

4.12.0

Minor Changes

• #1072 67b03a5 Thanks @moe-dev! - Bump packages as per mono v2025.11.0

Patch Changes

• Updated dependencies [67b03a5]:
  • @turnkey/http@3.15.0
  • @turnkey/wallet-stamper@1.1.7

4.11.0

Minor Changes

• #1063 71cdca3 Author @zkharit - Omit optional email parameter if not set

• #1058 9fbd5c4 Author @moeodeh3 - Update per mono release v2025.10.10-hotfix.2

Patch Changes

• Updated dependencies [9fbd5c4]:
  • @turnkey/http@3.14.0
  • @turnkey/wallet-stamper@1.1.6

4.10.5

Patch Changes

• Updated dependencies []:
  • @turnkey/wallet-stamper@1.1.6

4.10.4

Patch Changes

• Updated dependencies []:
  • @turnkey/wallet-stamper@1.1.5

4.10.3

Patch Changes

• #1016 9df42ad Author @amircheikh - Synced API as per mono v2025.10.2

• Updated dependencies [9df42ad]:

  • @turnkey/http@3.13.1
  • @turnkey/wallet-stamper@1.1.4

4.10.2

Patch Changes

• Updated dependencies []:
  • @turnkey/wallet-stamper@1.1.3

4.10.1

Patch Changes

• Updated dependencies []:
  • @turnkey/wallet-stamper@1.1.2

4.10.0

Minor Changes

• #977 4567059 Author @besler613 - OAuth2Authenticate now supports returning the encrypted bearer token via the optional bearerTokenTargetPublicKey request parameter (mono release v2025.9.5)

Patch Changes

• Updated dependencies [4567059]:
  • @turnkey/http@3.13.0
  • @turnkey/wallet-stamper@1.1.1

4.9.1

Patch Changes

• #958 5a96fe8 Author @amircheikh - - Synced api with mono

• Updated dependencies [5a96fe8]:

  • @turnkey/http@3.12.1
  • @turnkey/wallet-stamper@1.1.1

4.9.0

Minor Changes

• Updated dependencies [fc1d6e2, fc1d6e2, 06347ad]:
  • @turnkey/http@3.12.0
  • @turnkey/api-key-stamper@0.5.0
  • @turnkey/wallet-stamper@1.1.0

4.8.1-beta.0

Patch Changes

• Updated dependencies []:
  • @turnkey/api-key-stamper@0.5.0-beta.6
  • @turnkey/http@3.11.1-beta.0
  • @turnkey/wallet-stamper@1.1.0-beta.6

4.8.0

Minor Changes

• #879 026264c Author @zkharit - Update packages to include new activities as of the newest release (mono v2025.8.10)

Patch Changes

• Updated dependencies [026264c]:
  • @turnkey/http@3.11.0
  • @turnkey/wallet-stamper@1.0.9

4.7.0-beta.2

Minor Changes

• SDK beta release @turnkey/react-wallet-kit @turnkey/core

Patch Changes

• Updated dependencies []:
  • @turnkey/api-key-stamper@0.5.0-beta.5
  • @turnkey/wallet-stamper@1.1.0-beta.5
  • @turnkey/http@3.10.0-beta.2

4.7.0-beta.1

Minor Changes

• @turnkey/react-wallet-kit and @turnkey/core beta-3 release

Patch Changes

• Updated dependencies []:
  • @turnkey/http@3.10.0-beta.1
  • @turnkey/api-key-stamper@0.4.8-beta.4
  • @turnkey/wallet-stamper@1.0.9-beta.4

4.7.0-beta.0

Minor Changes

• @turnkey/react-wallet-kit and @turnkey/core beta-3 release

Patch Changes

• Updated dependencies []:
  • @turnkey/http@3.10.0-beta.0
  • @turnkey/api-key-stamper@0.4.8-beta.3
  • @turnkey/wallet-stamper@1.0.9-beta.3

4.7.0

Minor Changes

• #861 5d8be2d Author @amircheikh - Synced as per mono 2025.8.4

Patch Changes

• Updated dependencies [5d8be2d]:
  • @turnkey/http@3.10.0
  • @turnkey/wallet-stamper@1.0.8

4.6.0

Minor Changes

• #834 8b39dba Author @moeodeh3 - Update per mono release v2025.8.3-hotfix.0

Patch Changes

• #833 1a549b7 Author @moeodeh3 - Add optional includeUnverified parameter to getOrCreateSuborg() to allow inclusion of unverified subOrgs

• Updated dependencies [8b39dba]:

  • @turnkey/http@3.9.0
  • @turnkey/wallet-stamper@1.0.8

4.5.1-beta.2

Patch Changes

• Updated dependencies []:
  • @turnkey/api-key-stamper@0.4.8-beta.2
  • @turnkey/http@3.8.1-beta.2
  • @turnkey/wallet-stamper@1.0.9-beta.2

4.5.1-beta.0

Patch Changes

• Updated dependencies []:
  • @turnkey/api-key-stamper@0.4.8-beta.0
  • @turnkey/http@3.8.1-beta.0
  • @turnkey/wallet-stamper@1.0.9-beta.0

4.5.0

Minor Changes

• #826 f83f25b Author @turnekybc - Update per mono release v2025.8.1

Patch Changes

• Updated dependencies [f83f25b]:
  • @turnkey/http@3.8.0
  • @turnkey/wallet-stamper@1.0.8

4.4.0

Minor Changes

• #651 81e355c Author @turnekybc - Add Coinbase & MoonPay Fiat Onramp. View the Fiat Onramp feature docs.

Patch Changes

• Updated dependencies [81e355c]:
  • @turnkey/http@3.7.0
  • @turnkey/wallet-stamper@1.0.8

4.3.0

Minor Changes

• #782 e90a478 Thanks @r-n-o! - Release v2025.7.16

Patch Changes

• Updated dependencies [e90a478]:
  • @turnkey/http@3.6.0
  • @turnkey/wallet-stamper@1.0.7

4.2.4

Patch Changes

• #780 2db00b0 Thanks @moe-dev! - Patch fix for server actions leading to unwanted suborg creation when query requests time out

4.2.3

Patch Changes

• #763 cb13c26 Author @andrewkmin - Release per mono v2025.7.1. This release contains the following API changes:

  • Introduction of SmartContractInterfaces: we've now exposed endpoints for uploading ABIs and IDLs to help secure EVM and Solana signing flows. For more information, see our docs here

• Updated dependencies [cb13c26]:

  • @turnkey/http@3.5.1
  • @turnkey/wallet-stamper@1.0.7

4.2.2

Patch Changes

• Updated dependencies []:
  • @turnkey/wallet-stamper@1.0.7

4.2.1

Patch Changes

• Updated dependencies []:
  • @turnkey/wallet-stamper@1.0.6

4.2.0

Minor Changes

• #704 5f3dd98 Author @amircheikh - Synced with mono 2025.6.10 to include the following endpoints:

  update_user_email: Update a User's email in an existing Organization

  update_user_name: Update a User's name in an existing Organization

  update_user_phone_number: Update a User's phone number in an existing Organization

Patch Changes

• #698 7625df0 Author @moeodeh3 - Introduces an optional runtimeOverride parameter that allows the ability to explicitly specify the crypto environment: "browser", "node", or "purejs".

• Updated dependencies [5f3dd98, 7625df0]:

  • @turnkey/http@3.5.0
  • @turnkey/api-key-stamper@0.4.7
  • @turnkey/wallet-stamper@1.0.5

4.1.1

Patch Changes

• Updated dependencies [be0a621]:
  • @turnkey/http@3.4.2
  • @turnkey/wallet-stamper@1.0.4

4.1.0

Minor Changes

• #632 a38a6e3 Author @amircheikh - Exposed createOauthProviders and getUsers as server actions. These are used for social linking within @turnkey/sdk-react.

Patch Changes

• #663 593de2d Thanks @moe-dev! - Update to endpoints as per mono v2025.5.7. Add V5 TON address format generation. Non breaking

• Updated dependencies [5afbe51, 593de2d]:

  • @turnkey/wallet-stamper@1.0.4
  • @turnkey/http@3.4.1
  • @turnkey/api-key-stamper@0.4.6

4.0.1

Patch Changes

• Update @turnkey/sdk-types readme and install dependency in packages with common types

• #650 27fe590 Author @turnekybc - Update @turnkey/sdk-types readme and install dependency in packages with common types

4.0.0

Major Changes

• #601 07dfd33 Author @moe-dev.

This release introduces significant updates and new actions to the SDK server methods, enhancing authentication flows and simplifying usage:

Updated Actions:

• sendOtp: No longer requires a suborganization ID; OTPs can now be sent directly under a parent organization's context to any email or phone number.

• verifyOtp: Now returns a verificationToken, which is required for creating sessions via the new otpLogin action.

New Actions:

• otpLogin: Creates a session using a previously obtained verificationToken. Returns a session JWT.

• oauthLogin: Authenticates using an OIDC token obtained from a third-party provider (e.g., Google, Apple, Facebook). Returns a session JWT.

These changes standardize authentication processes, simplify integration, and streamline session management across the SDK.

Patch Changes

• #631 e8a5f1b Author @andrewkmin - Remove unused Next.js dependency

  • while the "use server" directive in actions.ts is to be used specifically with Next, removing it from this package (@turnkey/sdk-server) is fine, though applications using this package will need Next.js

• Updated dependencies [07dfd33]:

  • @turnkey/http@3.4.0
  • @turnkey/wallet-stamper@1.0.3

3.3.0

Minor Changes

• 25ca339: Adding replyToEmailAddress field for specifying reply-to when using a customer sender

Patch Changes

• Updated dependencies [25ca339]
  • @turnkey/http@3.3.0
  • @turnkey/wallet-stamper@1.0.3

3.2.0

Minor Changes

• 3f6e415: Update per mono v2025.4.5

Patch Changes

• Updated dependencies [3f6e415]
• Updated dependencies [4d1d775]
  • @turnkey/http@3.2.0
  • @turnkey/api-key-stamper@0.4.5
  • @turnkey/wallet-stamper@1.0.3

3.1.0

Minor Changes

• 3e4a482: Release per mono v2025.4.4

Patch Changes

• Updated dependencies [3e4a482]
  • @turnkey/http@3.1.0
  • @turnkey/wallet-stamper@1.0.3

3.0.1

Patch Changes

• 7b72769: Add sendFromEmailSenderName to sendOtp server action

3.0.0

Major Changes

• d1083bd: initOtpAuth now defaults to v2 (breaking) which allows alphanumeric boolean and otpLength (6-9) to be passed + associated updates to server actions. More details below.

• This release introduces the INIT_OTP_AUTH_V2 activity. The difference between it and INIT_OTP_AUTH is that it can now accept alphanumeric and otpLength for selecting crockford bech32 alphanumeric codes and the length of those codes. By default alphanumeric = true, otpLength = 9

• This release introduces sendFromEmailSenderName to INIT_OTP_AUTH, INIT_OTP_AUTH_V2, EMAIL_AUTH and EMAIL_AUTH_V2. This is an optional custom sender name for use with sendFromEmailAddress; if left empty, will default to 'Notifications'.

Patch Changes

• Updated dependencies [d1083bd]
• Updated dependencies [f94d36e]
  • @turnkey/http@3.0.0
  • @turnkey/wallet-stamper@1.0.3

2.6.1

Patch Changes

• 5ec5187: Fix initOtpAuth bug with improper version result (to be updated to V2 following release r2025.3.8)

2.6.0

Minor Changes

• ecdb29a: Update API as per mono v2025.3.2 - Add CREATE_USERS_V3

Patch Changes

• 0e4e959: bump update policy activity to v2

• c9ae537: Update nextJs to >= 15.2.3 as per github advisory: https://github.com/advisories/GHSA-f82v-jwr5-mffw

  For Next.js 15.x, this issue is fixed in 15.2.3 For Next.js 14.x, this issue is fixed in 14.2.25 For Next.js 13.x, this issue is fixed in 13.5.9 For Next.js 12.x, this issue is fixed in 12.3.5

• 72890f5: ### @turnkey/sdk-browser

  • Move all type definitions to ./__types__/base.ts
  • TurnkeyBrowserClient
    • refereshSession() now consumes a RefreshSessionParams parameter
    • loginWithBundle() now consumes a LoginWithBundleParams parameter
    • loginWithPasskey() now consumes a LoginWithPasskeyParams parameter
    • loginWithWallet() now consumes a LoginWithWalletParams parameter

  @turnkey/sdk-react

  • Auth.tsx
    • updated passkeyClient?.loginWithPasskey() to implement new method signature
    • updated walletClient?.loginWithWallet() to implement new method signature

  @turnkey/sdk-server

  • Move all type definitions to ./__types__/base.ts

• Updated dependencies [ecdb29a]

  • @turnkey/http@2.22.0
  • @turnkey/wallet-stamper@1.0.3

2.5.0

Minor Changes

• 93540e7: ## Major Package Updates

  @turnkey/sdk-browser

  • create abstract TurnkeyBaseClient class which extends TurnkeySDKClientBase
    • TurnkeyBrowserClient, TurnkeyIframeClient, TurnkeyPasskeyClient, and TurnkeyWalletClient all extend TurnkeyBaseClient
  • TurnkeyBrowserClient
    • Session Management
      • refreshSession - attempts to refresh an existing, active session and will extend the session expiry using the expirationSeconds parameter
      • loginWithBundle - authenticate a user via a credential bundle and creates a read-write session
      • loginWithPasskey - attempts to authenticate a user via passkey and create a read-only or read-write session
      • loginWithSession - takes a Session, which can be either read-only or read-write, created via a server action and attempts to authenticate the user
  • TurnkeyPasskeyClient
    • Session Management
      • createPasskeySession - leverages passkey authentication to create a read-write session. Once authenticated, the user will not be prompted for additional passkey taps.

  @turnkey/sdk-react

  • update TurnkeyContext to use new .getSession() method to check if there is an active session
  • OTPVerification component no longer receives authIframeClient or onValidateSuccess props

  Minor Package Updates

  @turnkey/sdk-server

  • expose sendCredential server action
  • add SessionType enum
    • READ_ONLY & READ_WRITE

  @turnkey/eip-1193-provider

  • update dependencies in package.json
    • moved from peerDependencies to dependencies
      • "@turnkey/http": "workspace:*"
      • "@turnkey/sdk-browser": "workspace:*"
    • moved from devDependencies to dependencies
      • "@turnkey/api-key-stamper": "workspace:*"
  • specify TypeScript version ^5.1.5

Patch Changes

• fdb8bf0: Add loading indicators for EWK. Exposed email customization to EWK.

2.4.0

Minor Changes

• 9317588: Adds wallet as an authentication option in the Embedded Wallet Kit components for sdk-react

2.3.0

Minor Changes

• 56a307e: Update api to mono v2025.3.0

Patch Changes

• Updated dependencies [56a307e]
  • @turnkey/http@2.21.0

2.2.0

Minor Changes

• 3c44c4a: Updates per mono release v2025.2.2

Patch Changes

• bfc833f: Add getOrCreateSuborg server action
• Updated dependencies [3c44c4a]
  • @turnkey/http@2.20.0

2.1.0

Minor Changes

• 57f9cb0: Update endpoints - surface GetWalletAccount

Patch Changes

• 69d2571: Upgrade elliptic
• Updated dependencies [57f9cb0]
  • @turnkey/http@2.19.0

2.0.1

Patch Changes

• 755833b: refactor stamper out of config object and move it directly onto the client to match @turnkey/http

2.0.0

Major Changes

• 1ebd4e2: Add server actions

Minor Changes

• 6695af2: Update per mono release v2025.1.11

Patch Changes

• Updated dependencies [6695af2]
  • @turnkey/http@2.18.0

1.7.3

Patch Changes

• 053fbfb: Update mono dependencies
• Updated dependencies [053fbfb]
  • @turnkey/http@2.17.3

1.7.2

Patch Changes

• 328d6aa: Add defaultXrpAccountAtIndex helper

• b90947e: Update default account exports, surface WalletAccount type

• fad7c37: @turnkey/iframe-stamper - Implemented MessageChannel API for secure communication between the parent and iframe.

  @turnkey/sdk-browser - fixed spelling in package.json @turnkey/sdk-server - fixed spelling in package.json

• Updated dependencies [2d5977b]

  • @turnkey/api-key-stamper@0.4.4
  • @turnkey/http@2.17.2

1.7.1

Patch Changes

• 538d4fc: Update api endpoints - NEW: User verification, SMS customization params
• Updated dependencies [538d4fc]
  • @turnkey/http@2.17.1

1.7.0

Minor Changes

• 78bc39c: Add default accounts for various address types
  • Add wallet account ID to list wallets endpoint

Patch Changes

• Updated dependencies [78bc39c]
  • @turnkey/http@2.17.0

1.6.0

Minor Changes

• 3dd74ac: Added functionality for constructing and returning stamped requests for all packages
• 4df8914: Version bump corresponding to mono release v2024.10.10. More detailed changelog to follow

Patch Changes

• Updated dependencies [4df8914]
  • @turnkey/http@2.16.0

1.5.0

Minor Changes

• 9ebd062: Release OTP functionality

Patch Changes

• Updated dependencies [9ebd062]
  • @turnkey/http@2.15.0

1.4.2

Patch Changes

• abe7138: Export DEFAULT_SOLANA_ACCOUNTS
• 96d7f99: Update dependencies
• Updated dependencies [96d7f99]
  • @turnkey/http@2.14.2
  • @turnkey/api-key-stamper@0.4.3

1.4.1

Patch Changes

• ff059d5: Update dependencies
• Updated dependencies [ff059d5]
  • @turnkey/http@2.14.1
  • @turnkey/api-key-stamper@0.4.2

1.4.0

Minor Changes

• c988ed0: Support activity polling (e.g. for awaiting consensus)

  • [Breaking] Update the activityPoller parameter for configuring polling behavior
  • Polling continues until either a max number of retries is reached, or if the activity hits a terminal status

  The shape of the parameter has gone from:

  {
    duration: number;
    timeout: number;
  }
  

  to

  {
    intervalMs: number;
    numRetries: number;
  }
  

Patch Changes

• Updated dependencies [848f8d3]
  • @turnkey/http@2.14.0

1.3.0

Minor Changes

• 93dee46: Add create read write session v2 which allows for user targeting directly from stamp or optional userId in intent

Patch Changes

• Updated dependencies [93dee46]
  • @turnkey/http@2.13.0

1.2.4

Patch Changes

• Updated dependencies [e2f2e0b]
  • @turnkey/http@2.12.3

1.2.3

Patch Changes

• Fix activity versioning for CREATE_SUB_ORGANIZATION (V5=>V6)

1.2.2

Patch Changes

• Updated dependencies [2d7e5a9]
  • @turnkey/api-key-stamper@0.4.1
  • @turnkey/http@2.12.2

1.2.1

Patch Changes

• f17a229: Update to oauth related endpoints to drop jwks uri from oauth providers
• Updated dependencies [f17a229]
  • @turnkey/http@2.12.1

1.2.0

Minor Changes

• Add Email Auth V2 - Optional invalidate exisiting Email Authentication API keys

Patch Changes

• Updated dependencies
  • @turnkey/http@2.12.0

1.1.0

Minor Changes

• Update to use new endpoints. Including CREATE_READ_WRITE_SESSION which allows one shot passkey sessions (returns org information and a credential bundle) and CREATE_API_KEYS_V2 which allows a curve type to be passed (SECP256K1 or P256)

Patch Changes

• Updated dependencies
  • @turnkey/http@2.11.0

1.0.0

Major Changes

• Stable Release: Add Oauth integration. New suborg creation version will now require an oauthProviders field under root users.

0.2.0

Minor Changes

• updated syntax

Patch Changes

• e4d2a84: Update client name

0.1.0

Minor Changes

• Ready for 0.1.0

0.0.1

Initial (experimental) release! This is an alpha release and subject to change.