Changelog

Eight days of shipping. Here's everything that landed since the Security Hardening release.

🗂️ Dashboard Category Tabs

Your Builder and Producer dashboards now have category tabs. Organize agents by topic, move them between categories, or archive the ones you're not actively using. Sorting is now alphabetical by default — easier to find what you need.

⚡ One-Step Listing

Publishing is now a single action. Register your agent, buy a Listing Pass, and list — all in one flow. No more switching between steps.

Upload validation also got smarter:

• Incompatible nodes are caught immediately on upload — no more failed publishes
• Legacy Start nodes auto-convert without manual editing
• OAuth and API key integrations are validated before you hit Publish
• Multi-webhook workflows get a clear error instead of a silent failure

🔍 Per-Node Output Viewer

When your agent returns an empty result, you can now expand a "Node Outputs" section to see what each node produced. Makes debugging much faster — you'll know exactly where data stopped flowing.

Also fixed:

• Failed executions now show as "Failed" immediately — no more stuck "Pending" status
• Error messages display on the execution details page (was showing blank)
• Execution list auto-refreshes while runs are in progress
• Timeout increased to 5 minutes for complex LLM workflows — with a clear message if it's exceeded

🧩 More Agents That Just Work

Several node types that were silently broken now work correctly:

• Filter, If, Switch (V2) — conditional logic nodes produce correct outputs
• Loop Over Items — loop results now surface properly
• Code node — empty results no longer cause errors; cross-node data access works; now supports date helpers, item context, and ~80% of the n8n-compatible Code API
• HTTP Request — gains pagination, parallel batching, and automatic retry
• Wait node — capped at 15 minutes with clear validation if exceeded

🛒 Marketplace & Discovery

• Search — find agents by name, description, and tags
• Creator profiles — builder addresses link to their public profile
• Chain badge — see which network each agent runs on, right on the card
• Free label — agents priced at the platform minimum now show "Free"
• No cost clutter — API cost multiplier hidden for free integrations (Telegram, Slack, etc.)

💰 Wallet & Payments

• Click to fund — Agent Wallet is now clickable with a direct fund modal
• Wrong chain? — purchase flow detects the wrong network and prompts you to switch
• No disconnect flash — wallet stays connected on page refresh
• Clear errors — wrong wallet on list/delist gets a human-readable message instead of "403"
• Run button disabled — when webhook isn't registered, the button is disabled with a tooltip

🎛️ Credentials

• "Set Up Credentials" button hidden when all credentials are already provided by the platform
• Trigger credentials (Telegram, Slack webhooks) auto-detected as producer-only
• Multiple nodes sharing one credential type are now grouped correctly
• Missing credentials caught server-side before execution — clear error, no wasted run

✨ Quality of Life

• Likes and category preferences sync across devices
• New version banner when a deployment drops — refresh to get the latest
• Confirmation modal before unlisting an agent
• Toast notifications moved to bottom-center (no more overlap with feedback widget)
• Navigation bar stays solid on scroll

Still on Base Sepolia testnet. All transactions use test tokens — no real money involved. Keep breaking things. 🛠️

Getting ready to open the doors. Before we invite real testers, we ran a full security pass across every layer of the stack — contracts, auth, and the execution worker. Here's what we locked down.

🛡️ Security Pass — Contracts

The on-chain layer got the most attention. We closed several attack surfaces that wouldn't matter on testnet but would be critical with real money:

• Agent wallets can now only send funds to approved recipients — a compromised worker key can no longer drain any wallet
• Platform withdrawals always go to the designated treasury address — no arbitrary destination
• Minting InUSD tokens is now impossible until the treasury is properly configured — no unbacked token inflation
• Gas exhaustion attack on batch billing records is now bounded and blocked

🔐 Security Pass — Auth & Worker

The worker and authentication layer got equally hardened:

• Credential setup now requires a wallet signature — previously, anyone who knew your address could spoof it
• Admin endpoints (wipe, reset) now require a secret token — no longer open to anyone who could guess the URL
• Signatures older than 1 hour are now rejected — prevents replay attacks with old or zero-timestamp signatures
• Source maps are no longer exposed in the browser — your contract logic stays private in production
• Nango credentials no longer appear (even partially) in logs

🏷️ New Terminology

We've landed on clearer language for the two sides of the marketplace:

• Builders — people who create and publish AI agents (previously "makers")
• Producers — people who deploy and run agents for their business (previously "founders")

This is reflected everywhere — routes, dashboard, docs, legal pages.

🔧 Stability

• Fixed a bug where agents using Telegram, Figma, and other event-based triggers would fail immediately on execution
• Fixed concurrent execution instability when agents use OpenAI or LangChain — these SDKs interfere with our async context tracking; we now have a safe fallback path
• Silent failures on billing and payment settlement are now loud errors — we'd rather crash visibly than lose money quietly

Four days of shipping. Here's everything that landed since the x402 release.

🎫 ServicePass System

Marketplace access now runs through a pass system. Makers burn a Listing Pass ($9.99) to publish an agent — no pass, no listing.

• Listing Pass — required to list any agent on the marketplace
• Featured Boost — burn a pass ($9.99/day) to pin your agent in a Featured row. Days stack, ranked by expiry

👤 Public Creator Profiles

Every creator now has a public profile at /profile/[address]. Shows identity, published agents, total runs, and clone count. No wallet needed to view — anyone can browse creator portfolios.

🔐 Smoother Dashboard Sessions

Dashboard queries now use signed sessions. Sign once, stay signed in — auto-renews on expiry. Fewer wallet popups, same security.

💰 Agent Wallet Balance

Your dashboard now shows each agent's wallet balance directly on service cards. Low-balance warnings and a runs-remaining estimate help you know when to top up — before your agent stops running.

🚦 Performance Auto-Delist

Underperforming agents get flagged automatically. Services earning below $10 over 30 days receive an "At Risk" badge. After 30 consecutive days below threshold, they're auto-delisted. A new Listing Pass is required to relist.

🧭 Better Credential Setup & Onboarding

• Post-purchase redirect — after buying an agent, you're taken straight to credential setup
• Maker-supplied keys explained — when the maker provides API keys, you'll see a clear explanation of how billing works
• Guided onboarding tours — new users get step-by-step walkthroughs
• Schema editing — input schemas can now be edited when empty, with a JSON text input mode

🐛 Fixes

• Dashboard no longer flickers after credential setup
• Locked credentials now clearly explain billing terms
• API cost percentage options now include explanations for every multiplier choice
• Removed obsolete whitelist modal
• Help center articles updated with corrected platform capabilities
• Prepaid webhook funding path restored alongside pay-per-call
• Blockchain write reliability improved (retry on transient nonce errors)

Still on Base Sepolia testnet. All transactions use test tokens — no real money involved. Keep breaking things. 🛠️

Twelve days of shipping. Here's everything that landed since the Marketplace Reset.

💳 x402 Pay-Per-Call Billing

Agents can now be triggered externally via webhook — and the caller pays automatically using USDC. No UI, no manual payment, no API key sharing. Just an HTTP POST.

• Server-to-server — automatic payment via fetch interceptor, zero integration work
• Browser-to-webhook — wallet-signed payment direct from any frontend
• Optimistic execution — payment verified (~100ms), agent runs, settlement happens in background (~15s)

This is how agents charge for their services in the open web.

🔌 21 New Integration Nodes

Your agents can now act inside 21 more platforms out of the box:

• Google Suite — Docs, Sheets, Slides, Gmail, Analytics, Ads
• Microsoft Suite — Excel, OneDrive, Outlook, Teams, To-Do
• Social & Community — LinkedIn, Reddit, Twitter/X
• Productivity — Asana, Box, ClickUp, Zoom
• Other — Keap, Spotify, Strava

All connections are managed through the Secure Vault — credentials stored encrypted, decrypted only at execution time.

🔄 Service Composition (Agent-to-Agent)

Agents can now call other published agents as sub-steps. Build modular, composable pipelines where each agent does one thing well and bills independently.

• Sub-agents run through their own billing pipeline
• Each call is metered and settled separately
• Map sub-agent addresses during publish — no hardcoding

🖼️ Agent Cover Images

Makers can now upload a cover image when publishing. Images show on marketplace cards and the service detail page. Min 200×200px — keep it clean.

🔁 Subscription Support

New on-chain SubscriptionManager contract: recurring monthly pull-payment subscriptions per agent.

• Soft cancellation — access continues to end of period
• Permissionless collection — anyone can trigger settlement (up to 50 at once)
• 100% of payment goes to the creator — no platform cut on subscriptions

📱 Mobile-First UI

The marketplace now has a proper mobile shell:

• DaisyUI 5 dock navigation at the bottom on mobile
• Filter bottom sheet (no more desktop-only sidebar)
• x402 billing mode indicator on the Founder dashboard

🤖 A2A Skills on Agent Cards

Each service card now exposes a machine-readable skills declaration (ERC-8004): input/output modes, pricing, and capabilities. Enables agent-to-agent discovery — the foundation for autonomous agent economies.

⚙️ Under the Hood

• ERC-721 migration — ServiceNFT migrated from ERC-1155 to ERC-721. Cleaner ownership model, OpenSea compatible.
• ERC-6551 TBA budget identity — Each agent's budget is held in a Token Bound Account scoped to its NFT.
• EIP-3009 transferWithAuthorization — Replaced two-step permit+transfer with single atomic authorization across all contracts. Fewer transactions, same security.
• Atomic settlement — Debit and delete now happen in a single Durable Object transaction. Double-settle and double-credit are impossible.
• OAuth2 E2E test coverage — Full credential flow tested end-to-end: OAuth popup → token → execution → response.
• -1,773 LOC dead shim/adapter layer deleted from the worker.

🐛 Fixes

• FeatureBase feedback widget now correctly identifies logged-in users (was silently sending anonymous identity)
• Private Network Access header added — fixes Chrome PNA enforcement for local development
• RespondToWebhook, HttpRequest, and Sort node compatibility gaps closed
• Platform fee corrected in Terms of Service ($0.01 → $0.0001)

Still on Base Sepolia testnet. All transactions use test tokens — no real money involved. Keep breaking things. 🛠️

We wiped the slate clean. New contracts, new pricing, fresh marketplace on Base Sepolia testnet. Time to test.

🆕 What's New

• All contracts redeployed — 10 fresh smart contracts, version 11
• No old data — The marketplace is empty and waiting for your agents
• $0.0001 platform fee — Run 10,000 agents for a dollar

🔬 What to Test

Everything is end-to-end ready on testnet:

• Makers — Publish a new agent, set your price
• Founders — Deploy an agent, fund it, run it
• Billing — Watch the cost breakdown in real-time

All transactions use test tokens on Base Sepolia — no real money involved.

💬 Found Something?

Hit us up through the feedback widget or submit a bug report. We want to hear what works and what doesn't.

Let's build. 🛠️

We've been busy! This week we added 8 new nodes to the executor, bringing the total to 43 supported nodes.

🤖 AI & LangChain

• OutputParserStructured — Get clean JSON from LLM responses
• MemoryBufferWindow — Persistent conversation memory (KV-backed)
• OpenAI Text — Direct OpenAI access alongside OpenRouter
• LangChain Adapters — OpenAI and Anthropic models via LangChain

🛠️ Data & Logic

• ItemLists — Split, merge, and manipulate arrays
• DateTime — Parse, format, and calculate dates
• SplitInBatches — Process large datasets in chunks

🌐 HTTP

• HttpRequest — Simplified HTTP calls for common use cases
• HTML — Parse and extract data from HTML

More nodes = more possibilities. What would you build? 💡

Big news for mobile and Web3 users!

📱 Base Mini App Support

Your agents can now run inside Base Mini Apps. We added ERC-1271 signature verification so smart contract wallets work seamlessly.

This means:

• Run agents from mobile-first Mini Apps
• No browser extension required
• Works with smart contract wallets

⛽ Gasless Transactions

New dual-mode transaction support lets you choose:

• EOA mode — Pay gas yourself (traditional)
• Paymaster mode — We sponsor the gas (gasless!)

Smooth UX for users who don't want to think about gas fees. 🎉

We simplified how billing works.

What Changed

• Removed the free tier (1,000 free runs/month)
• Platform fee is now $0.0001 per run — one hundredth of a penny

Why?

The free tier added complexity without much benefit. At $0.0001 per run, you can run 10,000 agents for $1. That's effectively free anyway.

The Math

| Runs | Platform Fee |
|------|-------------|
| 100 | $0.01 |
| 1,000 | $0.10 |
| 10,000 | $1.00 |

Simpler is better. Now you always know what you're paying. 🎯