What changed, by date.
A revoked pass is refused at the next check, and a copy a seller already holds stops working within the day. A spending limit that goes up on a paid plan needs two people to sign it off, and the signing screen shows exactly what is signed before anyone signs. Whoever approves works through a queue of limits waiting on a decision. The history screen in the dashboard pages through, filters by month and exports what it finds.
Issuing a pass shows its private key once, and never again. A check answers with a decision and a receipt, and the history keeps it beside every x402 payment. The SDK signs every call with the agent's own key, and the command line issues a pass, sets a spending limit and reads the history.
Registering an organisation needs no API key. The history is read at /record, and /spend answers the same for one version, with the same month filter. Every response states its rate limit, and a request refused for coming too often says how long to wait.
The documentation for the three calls, and the files an agent reads: llms.txt, a markdown version of every page, and the catalogue under /.well-known.