NodeJS changelog

​

Added

• Add getWalletByAddress method to look up a wallet by its blockchain address.
• Add emailDomain type support for allowlist entries via the new EmailDomainInviteInput type.
• Add bitcoin-taproot chain type support for wallet creation and signing.
• Add Schnorr signing algorithm support.

​

Added

• Add IntentService for manual approval workflows via privy.intents.
• Add exportPrivateKey and exportSeedPhrase convenience methods on wallets.
• API updates.

​

Added

• All authorized requests now include a privy-request-expiry header defaulting to 15 minutes. Use the new request_expiry input field or PrivyClientOptions.defaultRequestExpiryMs to override.
• Add support for the x-ratelimit-reset header on 429 responses.
• Extract authorizeRequest helper for wallet RPC authorization.
• API updates.

​

Fixed

• defaultRequestExpiryMs is now typed as a number.
• Reference the new wallet RPC types.
• Use SuccessResponse for delete operations in key-quorums and policies.
• Validate that id parameters are not empty strings in get methods.

​

Breaking changes

• KeyQuorumDeleteResponse, PolicyDeleteResponse, and PolicyDeleteRuleResponse have been removed. The corresponding delete() / deleteRule() methods now return SuccessResponse.
• AppResponse sub-types (e.g. AppResponse.EmbeddedWalletConfig, AppResponse.FundingConfig) have been removed in favor of standalone types (EmbeddedWalletConfigSchema, FundingConfigResponseSchema, etc.).
• RPC and signing response data types have been renamed from namespace form to flat exports (e.g. EthereumPersonalSignRpcResponse.Data → EthereumPersonalSignRpcResponseData; same pattern for all Ethereum, Solana, and raw-sign responses).

​

Breaking changes

• PrivyWalletsService.create() no longer accepts 'privy-idempotency-key' as a parameter. Use idempotency_key instead.
• PrivyPoliciesService.create() no longer accepts 'privy-idempotency-key' as a parameter. Use idempotency_key instead.

​

Added

• Added the apps service for access to API calls on the App resource.
• Added support for apps().getSettings(), reading the configuration object of your Privy app.
• Added support for apps().inviteToAllowlist(), .getAllowlist() and .removeFromAllowlist() allowing fine-grained control on user invites.
• Added support for apps().getTestAccessToken() enabling integration tests for your development app.
• API updates.

​

Added

• API updates.

​

Added

• Added signUserOperation utility for signing Ethereum user operations.
• Exposed the LinkedAccount type for improved type safety.
• Webhook verification now returns a typed payload.
• API updates.

​

Added

• Added x402 payment methods support.
• API updates.

​

Breaking changes

• The type property on LinkedAccountCustomOAuth is now guaranteed present (previously optional).

​

Added

• Added EIP-7702 support: transaction type now includes 4, and authorization_list parameter added to transaction inputs.
• Added 'eurc' and 'usdb' asset types to balance and transaction queries.
• Added 'eur' currency option to BalanceGetParams.include_currency.
• Added 'chain_id' as a valid field in EthereumTransactionCondition for policies.
• Added user_operation_hash field to EthereumSendTransactionRpcResponse.Data.

​

Added

• Added support for @solana/kit signers via the createSolanaKitSigner function.
• Added generateP256KeyPair, a helper for creating P256 keypairs for use in resource ownership and authorization.

​

Deprecated

• Deprecated verifyAuthToken in favor of verifyAccessToken (introduced in this version).

​

Dependencies

• Update @hpke/core to ^1.7.5

​

Added

• Added support for Sepolia testnet in transaction queries.

​

Improved

• Enhanced WalletRawSignResponse to include a method field for better response identification.
• Renamed the WalletRawSignParams.Bytes variant, to match the style of the existing WalletRawSignParams.Hash option.

​

Added

• Added support for Tron in policies, including specific transaction conditions for TransferContract and TriggerSmartContract.
• Added support for eth_signUserOperation policies.
• Expanded transaction query support to include Ethereum, Arbitrum, Linea, Optimism, and Polygon (previously limited to Base).
• Enhanced raw signing capabilities with hex encoding and support for both keccak256 and sha256 hash functions.

​

Breaking changes

• RPC response types (e.g. EthereumPersonalSignRpcResponse) are now exported directly instead of nested under the WalletRpcResponse namespace.

​

Added

• Added support for reading Passkey accounts from identity tokens.
• Breaking change: Updated the AuthorizationContext interface to support multiple user JWT signing mechanisms.

​

Fixed

• Includes a fix for the users search searchTerm parameter.

​

Added

• Added support for performing a raw signature over a utf-8 byte sequence.

​

Improved

• Better docs around resource ownership and authorization keys.

​

Added

• Support linked accounts for custom OAuth providers.
• Improved typing for linked embedded wallet accounts.

​

Added

• Support for verifying webhook invocations (via signatures).

​

Fixed

• Automatically remove authorization key prefixes