We’ve added support for end-to-end encryption of sensitive data transmitted between your application and Method’s API, available to everyone. Here’s what’s new:
Hybrid Encryption: Uses AES-GCM (for payload encryption) and RSA-OAEP-256 (for key encryption) to ensure confidentiality even if network traffic is intercepted.
Public Key Registration: Register your RSA public key with Method via a .well-known endpoint or direct upload.
Encrypted Requests & Responses: Send encrypted payloads using the Method-MLE: jwe header; Method encrypts responses using your public key.
Key Management: Support for key rotation, deprecation, deletion, and webhook notifications for Method key changes.
We’ve expanded the Card Brand object to provide a more structured format with richer brand details — making it easier to identify, display, and integrate specific card products with consistent issuer, network, and branding data.
Available when passing Method-Version: 2025-07-04 in the request header.
We now support asynchronous Connect requests. You’ll receive a connect.available webhook when an Async Connect is completed. Async Connect requests can be created by either:
Setting the Prefer: respond-async header
Specifying products and / or subscriptions in the request body
The Connect object will now include requested_products and requested_subscriptions fields in the response body.
The product_id field in the Product object and the Retrieve endpoint are now deprecated. We’ve added the latest_successful_request_id field to the Product object. This field will contain the ID of the most recently successful Product resource.For more information, please refer to the Entity Products API and Account Products API.