# Changelog

> CurrencyCore documentation and API changes, starting with the 2026-11-11 developer guide, OpenAPI publication, MCP OAuth fix, docs hub, and API reference.

Canonical: https://currency-core.com/docs/guides/changelog/
Updated: 2026-11-11
Published: 2026-11-11

---
This changelog records shipped documentation and developer-facing changes. It
starts with the 2026-11-11 release and does not reconstruct older history.

## 2026-11-11

### Developer guide

Added the developer guide under [Guides](/docs/guides/), including migration
paths for Fixer, CurrencyLayer, and ExchangeRate-API, a provider-neutral
migration checklist, a generated Postman collection, this changelog, a FAQ, and
a support page. The guide also covers caching, retries, testing, observability,
framework setup, and common product patterns.

### OpenAPI 3.1 published

Published the OpenAPI 3.1 contract at [`/openapi.json`](/openapi.json). It covers
all 15 public paths, both authentication schemes (`Authorization: Bearer` and
`x-api-key`), the shared error envelope, and the response schemas used by the
API reference. The file is copied from `packages/shared/openapi.json` so the API,
SDKs, and site use one source. See [OpenAPI specification](/docs/openapi/).

### MCP OAuth fix

Fixed MCP OAuth discovery for remote clients:

- An unauthenticated request to `/mcp` now returns `401` with a
  `WWW-Authenticate` challenge instead of `200` with a reduced public tool list.
  Remote clients start the sign-in flow from that challenge.
- Protected-resource metadata is served at both
  `/.well-known/oauth-protected-resource` and
  `/.well-known/oauth-protected-resource/mcp`.
- The metadata `resource` is the exact `/mcp` URL, not the bare host, and the
  advertised scope includes `mcp:tools`.

See [MCP OAuth and access](/docs/mcp-oauth/) and
[MCP troubleshooting](/docs/mcp-troubleshooting/).

### Docs hub

Rebuilt the documentation hub at [/docs/](/docs/) with navigation grouped by
Info, Endpoints, AI, MCP, Code Examples, and Integrations. The hub links the
quickstart, authentication, OpenAPI, errors, MCP, and AI entry points, plus
task-oriented guides.

### API reference

Published the browsable REST reference at [/docs/api/](/docs/api/). It is
generated from the same OpenAPI contract and grouped into Core, History, PPP,
Analytics, Reference, and AI. Each path lists its parameters, authentication
requirements, plan gates, response statuses, and schema names.

## Verified at this release

These facts are current for this release and are documented on the linked pages:

- 15 public REST paths, described in the [OpenAPI specification](/docs/openapi/)
  and the [API reference](/docs/api/).
- 160 fiat currencies. `/v1/currencies` returns 165 entries: 160 fiat plus
  `XAU`, `XAG`, `XPT`, `XPD`, and `XDR` reference entries. See
  [Currencies](/docs/currencies/).
- History reaches 1949 as annual parity for GBP/USD and USD/INR, 1971 for daily
  majors, and 1999 for EUR pairs. See [History](/docs/history-endpoint/) and
  [History coverage](/docs/guides/history-coverage/).
- Free includes 1,000 requests per month, 100 AI credits, and the last 30 days of
  history. Starter is $9/mo with 50,000 requests and full history. Public pricing
  checked 2026-11-10. See [Rate limits](/docs/rate-limits/) and
  [Pricing](/pricing/).
- The rate feed is fiat only. Reference rates are polled hourly from
  central-bank sources, with daily fixings underneath. There is no 60-second
  feed. See [Rates](/docs/rates-endpoint/).

## Related

- [OpenAPI specification](/docs/openapi/)
- [Authentication](/docs/authentication/)
- [Errors](/docs/errors/)
- [Rate limits](/docs/rate-limits/)
- [All integration guides](/docs/guides/)
- [API reference](/docs/api/)
