Changelog

WHAT'S NEW

Latest features, improvements, and updates to PolicyLayer.

New Feature

X402 Policy Enforcement

Agents can now pay for HTTP 402 APIs with full policy enforcement. Set per-endpoint spending limits, allowlist recipients, restrict currencies, and rate-limit requests—all without custodying keys.

New endpoints are auto-discovered and configured using your default policy, with optional webhook notifications. Works with any X402-compatible service including Coinbase Payments MCP and Cloudflare Agent SDK.

New Feature

Policy Simulator

Test two-gate enforcement without signing up. The Policy Simulator lets you adjust limits, trigger scenarios, and watch policies evaluate transactions.

Quick scenarios cover approved, denied, and tampered outcomes. Understand how Gate 1 and Gate 2 work together before integrating.

New Feature

Admin Audit Log

Track who changed API keys, policies, and organisation settings. Every admin action now creates an audit entry showing the actor, timestamp, and what changed.

View your audit log in Settings → Audit Log. Filter by action type or date range to find specific changes. Expand any entry to see full details.

Built for compliance teams who need to answer “who did what and when?”

Improvement

Lighter SDK Install

The PolicyLayer SDK now installs faster with fewer dependencies. Wallet adapters (Coinbase, Dynamic, Privy) are now optional peer dependencies—install only what you use.

Upgrade to SDK 1.2.0:

npm install @anthropic/policylayer-sdk@latest

Your existing code works unchanged. Bundle size reduced for projects not using all adapters.

Improvement

Better Error Messages

SDK errors now explain what went wrong and how to fix it. Each error includes a unique code you can search in our docs.

Before: Error: Request failed

After: PolicyLayerError [PL_AUTH_001]: Invalid API key. Check your API key in the dashboard at app.policylayer.com/settings

All SDK errors follow this pattern, making debugging faster.

Improvement

Website Redesign

Faster, cleaner website built on modern technology. Pages load instantly and navigation feels snappier.

New additions:

  • About page: Learn who we are and why we built PolicyLayer
  • Contact form: Reach us directly from the website
  • Better mobile experience: Full functionality on any device
Improvement

Faster Dashboard

Dashboard pages now load 3x faster. Navigation between sections no longer shows loading spinners—data stays cached as you move around.

Improvements:

  • Instant page transitions
  • Agents list loads once, updates in background
  • Policy changes reflect immediately without full reload
Improvement

Security Hardening

Enhanced security across the dashboard and API. Added rate limiting, improved session handling, and strengthened input validation.

Your data is protected by industry-standard security practices, giving you confidence when managing agent spending controls.

Improvement

Dashboard Redesign

Redesigned the dashboard with a focus on policy checks. See at a glance how many transactions your agents process and how policies are performing.

New widgets show approval rates, spending trends, and agents needing attention—all on one screen.

Improvement

Onboarding Improvements

New empty states guide you through setup when you first create an agent. Clear next steps show exactly what to configure before your agent can transact.

SDK now supports skipConfirmation for automated workflows that don’t need user prompts.

New Feature

SDK Public Launch

The PolicyLayer SDK is now publicly available on npm. Integrate spending controls into your AI agent in under 10 lines of code.

npm install @policylayer/sdk

Works with Coinbase, Dynamic, Privy, and any EVM-compatible wallet. Full documentation at docs.policylayer.com.

New Feature

Transaction Simulator

Test your policies before going live. The simulator lets you run transactions against your rules without spending real funds.

Find it in Simulator in the dashboard. Enter any amount, recipient, and asset to see exactly how your policies would respond.

New Feature

Spending Limits

Set daily and per-transaction limits for each agent. When an agent hits its limit, transactions are blocked until the next day or until you adjust the policy.

Configure limits per asset (ETH, USDC, etc.) with different thresholds for different risk levels.

New Feature

Recipient Whitelist

Restrict where your agents can send funds. Add approved wallet addresses to the whitelist—any transaction to an unknown address is blocked.

Protect against agents sending funds to the wrong destination or being manipulated by malicious prompts.