Updates

Changelog

New features, improvements, and fixes.

v1.3.1

Inbound webhooks now count toward usage

Webhooks arriving on an inbound endpoint were not being metered. They are now, on the same rule as everything else you send. If you use inbound endpoints, expect your usage to read higher from today.

fix Inbound webhooks count toward your plan’s message allowance. A receipt costs one message per destination it routes to, the same as sending those events yourself. A verified webhook you receive but route nowhere counts as one, for the receipt.
fix Nothing is backdated. Counting starts from today, so inbound traffic you received before this change is not billed and will not appear in your usage.
fix Inbound is never refused over quota. A provider that gets an error usually will not resend, and many disable an endpoint that keeps failing, so an over-quota webhook is still accepted, verified, and stored.
docs Pricing now states the rule plainly: a message is one delivery to one destination, through either door. Fan-out to three endpoints is three messages; retries and same-cycle replays are still free.
v1.3.0

The reliable action layer

Mittr now describes itself by what it does for every action your software takes, whether your code fires it or your AI decides it. Plus the action ledger, a security pass across the API, and a contact form that reaches a human.

feature Action ledger: GET /api/v1/ledger/agent-actions returns the actions your agents dispatched, each with its delivery attempts inline. Filter by agent run or time window; export CSV for a compliance review. Admin-scoped.
feature Agent actions tab in Activity: the same ledger in the dashboard, with sortable columns, per-row attempt timelines, and the CSV export.
fix Inbound credentials can now be removed. Blank fields still mean "keep what is stored", and an explicit remove action clears them; a config that could never verify is refused at save time instead of rejecting every webhook afterwards.
fix Agent correlation is persisted on every create path. Events created through one path silently dropped their agent run id, leaving them out of the ledger.
security Security pass: API keys now yield a session with their own role rather than admin, suspended workspaces lose access immediately, keys are no longer accepted in query strings outside WebSocket upgrades, and inbound replay windows apply to composite-signature providers.
feature A contact page that reaches a human: pick a topic and send, or mail sales, support, or security directly. Replies within one business day.
docs Docs: What Mittr is and Reliability and audit as core concepts, plus a guide for delivering and verifying A2A push notifications.
fix Prices are now explicitly VAT-exclusive across the site, pricing table, and checkout.
v1.2.0

AI agents over MCP

Any MCP-compatible agent can now dispatch actions through Mittr and inspect what happened, with the correlation fields to trace one agent run end to end.

feature MCP server at /mcp: seven mittr_* tools letting an agent send events, inspect delivery attempts, replay failures, and create endpoints. Streamable HTTP, API-key auth, read-only tools annotated so hosts can auto-approve them.
feature Tools and their arguments are self-describing, and the server returns usage instructions on connect, so agents call them correctly without extra prompting.
api Optional agentRunId and agentMetadata on events: correlate every action from one agent run, and keep the context that produced it.
security Session, CSRF, and SSO cookies set Secure behind a TLS proxy.
fix Billing overview shows the workspace’s real plan instead of always reading Free, and abandoned Paddle checkouts are acknowledged instead of retrying against a 401.
fix SSO buttons appear on signup, not just sign-in.
docs AI agents guide, an MCP connector example, and a dedicated AI agents page.
v1.1.0

Node SDK and public API reference

A typed Node.js SDK on npm, an interactive API reference generated from the same OpenAPI spec the server returns, and three dashboard polish moments.

sdk @mittr/sdk-node: official Node.js SDK on npm. Typed client, cursor iteration, signature verification, framework-agnostic webhook middleware. Zero runtime deps, Node 18+.
docs Live API reference at /api/reference, generated from openapi.yaml. Per-tag sidebar, code samples in every language, "Try it" panel.
api OpenAPI spec expanded to cover the full inbound webhook surface, usage counters, and static egress IPs. Batch-retry field names now match the wire (eventIds / endpointId).
feature Cmd-K paste recognition: drop a dashboard URL or webhook destination URL into the palette and a "Jump to ..." item appears at the top.
feature Drag a .json file onto the Send / Edit event payload field to autofill it.
feature Event rows pulse in their new status colour when status changes between refreshes (queued → delivering → delivered/failed).
v1.0.0

Mittr Cloud Launch

First public release of Mittr, webhook delivery as a managed service.

feature Outbound webhook delivery with at-least-once semantics, configurable retries, and exponential backoff per endpoint.
feature HMAC-SHA256 signing on every delivery: X-Mittr-Signature, X-Mittr-Timestamp, replay protection via signed timestamps.
feature Fan-out routing by event type: publish once, deliver to every subscribed endpoint.
feature Idempotency via X-Idempotency-Key on event creation, safe to retry without double-delivery.
feature Dashboard with live stats, per-endpoint success rate and latency, attempt timeline.
feature Workspace + API key authentication. Per-key role scoping.
feature Plan tiers (Free, Starter, Growth, Scale) with per-event quotas and overage rates.