Critical OTP race condition fix, organization-scoped API keys with multi-configuration support, Cloudflare D1 compatibility, and improved session and OAuth token reliability.
Framework-agnostic MCP client, new auth CLI, legacy OAuth client compatibility, and email OTP user-enumeration protection for stronger account security.
Stripe seat-based and usage-based billing, IdP-initiated SAML Single Logout, SCIM ownership model, test utilities plugin, and TXT record verification for SSO domains.
