Plaid

The custom Sandbox user configuration object now accepts an optional has_perpetual_otp field. When set to true, the Item behaves like one at an institution that presents a multi-factor challenge on every login attempt.

For Plaid Check Consumer Report, the Item object now includes a paired_item_id field, available through /item/get and /user/items/get, identifying the corresponding Plaid Inc. or Plaid Check Item.

Plaid released its next-generation Go SDK, plus Link Android SDK v6.3.0 with automatic session handoff for Embedded Link and a fix for password-manager autofill on the Link credentials screen. iOS SDK v7.2.2 and 6.5.4 fix Link opening at the window size captured at session creation, and React Native and Flutter SDKs update to the new Android and iOS versions.

Haitian Creole (ht) is now a supported Link language, and /sandbox/transactions/create now works on every Sandbox Item, backdates transactions up to 730 days, and accepts an optional account_id. Also enabled Link Returning User Experience for the UK, published /cra/report/create and /cra/report/get for Plaid Check, released the /identity/match/list endpoint, and added adjustment to TransferEventType.

Error responses for /oauth/* endpoints now align with the OAuth spec or the Plaid API depending on content-type, and /sandbox/transactions/create works on every Sandbox Item with transactions up to 730 days in the past. New /cra/report/create and /cra/report/get endpoints replace the older /check_report/ endpoints, which remain supported, and Haitian Creole is now a supported Link language.

Launched LendScore 2 models and Instant Link (Plaid Check), and added a beta /beta/webhook_events/list endpoint for managing missed webhooks. Also shipped a beta Plaid Go client library, returned consent_expiration_time for Chase Items on /item/get, and fixed a Link iOS SDK crash affecting Layer customers.

Plaid Check Consumer Report gains LendScore 2, an updated family of models (Core, auto, home lending, short term), plus Instant Link, which returns permissioned insights in under two seconds for qualifying sessions. Link iOS SDKs v7.2.1 and v6.5.3 fix a crash affecting Layer customers, and /item/get now returns consent_expiration_time for Chase Items.

LendScore 2 ships for core, auto, home lending, and short-term models, and Instant Link returns permissioned insights in under two seconds for qualifying sessions. Link iOS SDK v7.2.1 and v6.5.3 fix a crash impacting Layer customers, and /item/get now returns consent_expiration_time for Chase Items.

Transactions are now supported on loan-type accounts beyond student and mortgage, including auto loans and lines of credit.

iOS SDK v7.2.0 and v6.5.2 add security fixes, with v7.2.0 also adding automatic session handoff for Embedded Link and limiting Safari Web Inspector to Sandbox sessions only. Android SDK v6.2.2 and v5.5.5 fix a static-initialization crash when an activity is restored after process death, and the Institution object gains a connection_availability field.

Added connection_availability to the Institution object, roll_dates_forward to custom Sandbox user configuration, and a client_user_id field on the Check CRA_REPORT_UPDATED webhook. Identity Verification gains an optional language parameter on create and a rule groups option for risk-based escalation, and Link SDKs ship across iOS, Android, and React Native with security and crash fixes.

Institution responses now include a connection_availability field, and /identity_verification/create accepts an optional language parameter with rule groups as an alternative to the Trust Index threshold for risk-based escalation. Link SDK releases shipped security fixes, Embedded Link session handoff, and crash fixes across iOS, Android, and React Native.

Effective October 11, 2026, home equity and commercial account subtypes are subdivided into home equity loan and commercial line of credit, so clients filtering on these must add the new subtypes. Sandbox Studio launched in the Dashboard, unused installment and charge card subtypes were removed, and Plaid Check now returns empty repairable_items and failed_products as empty arrays.

Removed the unused installment loan and charge card credit account subtypes, and announced further subtype changes taking effect October 11, 2026 that split home equity and commercial into separate loan and line-of-credit subtypes. Fidelity Investments access for new Custom and Growth customers drops from 8 weeks to 4 weeks, Charles Schwab from 6 weeks to 5 business days, and pay-as-you-go Schwab customers no longer need to explicitly request access.

Sandbox Studio is now available in the Dashboard for Sandbox API calls, custom profiles, and saved institutions, and Plaid announced that home equity and commercial subtypes split into home equity loan and commercial line of credit on October 11, 2026. Fidelity access is reduced to 4 weeks for Custom and Growth customers, unused installment and charge card subtypes were removed, and Check endpoints now return empty repairable_items and failed_products as [].

CRA Servicing is now generally available via new /cra/servicing/subscription/* endpoints, replacing deprecated Cash Flow Updates (migration deadline August 20, 2027). New Chase Items get consent expirations starting February 2027, with earliest renewals in update mode; existing Items default to "always". Also added a Billing page for negotiated-rate customers, a phone call option for Identity Verification codes, and MCC support via a new merchant_category_code field.

Plaid Check Servicing is generally available, replacing the deprecated Cash Flow Updates, adding a CRA_REPORT_UPDATED webhook, PDF report redesign, and LendScore in PDF reports from October 1, 2026. Chase consent and TAN expirations were announced with 6-month, 1-year, and always consent durations and earliest expirations in February 2027, requiring update mode integration.

Identity endpoints on non-depository Capital One accounts no longer cause the Item to enter an error state when identity data is unavailable. Item consent expiration is now accurately tracked, reliably entering an error state on expiry. Dashboard Settings page redesigned to a full-page view; Android SDK v6.2.1 fixes OAuth bugs for multi-institution linking.

Identity endpoints on non-depository Capital One accounts no longer put Items into an error state when identity data is unavailable. Consent expiration data is more accurate, and Items now reliably enter an error state when they expire. Also released Android SDK 6.2.1 with OAuth bug fixes and redesigned the Dashboard Settings page.

Improved behavior of Identity endpoints when called on non-depository Capital One accounts where identity data is not available. The failure to fetch identity data in this scenario will no longer cause the Item to enter an error state. Improved accuracy of Item consent…