> ## Documentation Index
> Fetch the complete documentation index at: https://docs.phosra.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Changelog

> Notable changes to the Phosra API, the platform conventions, and the published SDKs — newest first.

Notable, developer-facing changes to the Phosra API, the platform conventions, and
the published SDKs — newest first. API version `v1` is additive: entries here add
capability or documentation, they do not break existing `v1` calls.

<Info>
  Version and date facts on this page are drawn from the public npm registry and
  the live sandbox census. For how versions pin together, see
  [Versioning](/versioning). For the SDK packages, see the [SDK overview](/sdks/overview).
</Info>

<Update label="2026-07-06" description="Platform-conventions reference">
  **New reference pages for the cross-cutting platform contracts**, each verified
  against the live sandbox:

  * [Rate limits](/rate-limits) — the `100 req/min` default, the
    `X-RateLimit-*` + `Retry-After` headers, and copy-paste backoff in four
    languages.
  * [Pagination](/pagination) — the two list shapes (offset arrays on the product
    plane, `next_cursor` envelopes on the census rails) and how to walk each.
  * [Idempotency](/idempotency) — where the key lives (there is no
    `Idempotency-Key` header), the `200 + OCSS-Replay: original` faithful-replay
    contract, and the `409 replay` pitfall.
  * [Versioning](/versioning) — the API path, `OCSS-v1.0-pre`, dated Annex B
    editions, `ETag`/`If-None-Match`, and exact SDK pinning.
</Update>

<Update label="2026-07-04" description="SDK releases">
  * **`@openchildsafety/ocss` `0.1.3`** — the OCSS protocol + RFC 9421 request
    signer (`signRequest`) used across the signed examples in these docs.
  * **`@phosra/link` `0.1.2`** — parent-facing connect flow.
  * **`@phosra/gatekeeper` `0.2.2`** — tighten-only enforcement overlay.

  Pin exact (`0.x` minors may break) — see [SDK versioning](/versioning#sdk-versioning-pin-exact).
</Update>

<Update label="2026-06-28" description="Developer platform + first SDK line">
  * **Self-serve developer orgs** — sign up, auto-provision a dev org, and mint a
    `phosra_test_` key with no sales call. See [Create an account](/platform/create-account).
  * **`@phosra/sdk` `0.1.0`** — the first published server SDK line.
  * **`@phosra/cli` `0.2.0`** and **`@phosra/mcp` `0.4.0`** published.
  * Free-tier orgs default to **100 requests/minute** ([Rate limits](/rate-limits)).
</Update>

<Update label="2026-05-15" description="MCP server">
  * First release of the **`@phosra/mcp` MCP server**, exposing Phosra tools to
    agents. See the [MCP server SDK](/sdks/mcp-server).
</Update>

## Current platform conventions

These are the standing contracts of the `v1` surface, not point-in-time releases.
They are documented and verified on their own pages:

| Convention         | Value                                       | Reference                                               |
| ------------------ | ------------------------------------------- | ------------------------------------------------------- |
| API version        | `/api/v1` (in the path)                     | [Versioning](/versioning#api-version-it-is-in-the-path) |
| OCSS spec version  | `OCSS-v1.0-pre`                             | [Versioning](/versioning#ocss-spec-version)             |
| Default rate limit | `100` req / 60 s (free tier)                | [Rate limits](/rate-limits#the-limit)                   |
| Idempotency marker | `OCSS-Replay: original` on faithful replays | [Idempotency](/idempotency#the-two-outcomes)            |
| Error classes      | closed set of seven                         | [Errors](/errors#ocss-error-classes)                    |

<Note>
  Looking for infrastructure status and incidents rather than API changes? That
  lives on the [status page](https://openchildsafety.com/status).
</Note>