Changelog

What changed in the API, MCP server and dashboard. Subscribe via RSS.

Added

  • lookalike_businesses MCP tool: find peer companies for a seed business from Claude, Cursor and other MCP clients.
  • Post-checkout onboarding page that walks you from a new plan to your first API key and MCP call.

Changed

  • The remote MCP endpoint returns a real HTTP 401 with WWW-Authenticate when tools/call has no key or an invalid key.

Fixed

  • MCP registry and npm metadata now point at the published package and repository.

Security

  • Optional two-factor authentication (authenticator app) in dashboard settings. When it is on, creating, rotating or revoking API keys requires a verified session.
  • Patched framework and dependency advisories (Next.js 15.5.28 and transitive packages).

Added

  • Comparison pages: KnowFirm vs Middesk and KnowFirm vs Enigma.

Changed

  • A past-due subscription now gets its own 402 message with a link to billing, separate from running out of credits.

Fixed

  • The remote complaint_risk MCP tool returns only the CFPB summary, matching the npx package.

Added

  • Status page lists the REST API, MCP endpoint, data warehouse and control plane.
  • "Test your MCP key" in the dashboard: a dry-run business_lookup that shows the credit cost.
  • /.well-known/security.txt for coordinated vulnerability disclosure.

Changed

  • The remote MCP endpoint returns a structured 503 with install docs while it is disabled.

Added

  • Low-credit banner in the dashboard and an upgrade link on every 402 response.
  • /docs/mcp install guide with per-client setup for Claude Desktop, Cursor and others.

Added

  • Self-serve Starter and Growth plans with Stripe checkout.

Fixed

  • Usage CSV export fails closed instead of returning partial data.