​
New Features

​
Message-Level Encryption (MLE)

MLE We’ve added support for end-to-end encryption of sensitive data transmitted between your application and Method’s API, available to everyone. Here’s what’s new:
  • Hybrid Encryption: Uses AES-GCM (for payload encryption) and RSA-OAEP-256 (for key encryption) to ensure confidentiality even if network traffic is intercepted.
  • Public Key Registration: Register your RSA public key with Method via a .well-known endpoint or direct upload.
  • Encrypted Requests & Responses: Send encrypted payloads using the Method-MLE: jwe header; Method encrypts responses using your public key.
  • Key Management: Support for key rotation, deprecation, deletion, and webhook notifications for Method key changes.
You can find a quickstart guide here. For more information, please refer to the Message Level Encryption documentation.

​
Card Brand API

Card Brands We’ve expanded the Card Brand object to provide a more structured format with richer brand details — making it easier to identify, display, and integrate specific card products with consistent issuer, network, and branding data.
Available when passing Method-Version: 2025-07-04 in the request header.
Key Changes:
  • network and issuer are now nested inside each brand object.
  • Added card_product_id, description, and type fields.
  • Removed last4 and shared fields.
For more information, please refer to the Card Brand API.

​
Card Products API

We’ve added a new Card Products directory accesible via our API allowing you to retrieve all Card Brand objects associated with a given Card Product.
Available when passing Method-Version: 2025-07-04 in the request header.
For more information, please refer to the Card Products API.

​
Improvements

​
Connect API

We now support asynchronous Connect requests. You’ll receive a connect.available webhook when an Async Connect is completed. Async Connect requests can be created by either:
  • Setting the Prefer: respond-async header
  • Specifying products and / or subscriptions in the request body
The Connect object will now include requested_products and requested_subscriptions fields in the response body.
For more information, please refer to the Connect API.

​
Webhook API

We’ve added a new refs object to webhook payloads. This object contains the entity ID of the Entity that the webhook is related to.
We have also added the following new webhooks:
  • card_brand.available
  • connect.available
  • method_jwk.create
  • method_jwk.update
For more information, please refer to the Webhooks API.

​
Entity and Account Products

The product_id field in the Product object and the Retrieve endpoint are now deprecated. We’ve added the latest_successful_request_id field to the Product object. This field will contain the ID of the most recently successful Product resource. For more information, please refer to the Entity Products API and Account Products API.