npx @buildinternet/releases get resendResend is now a GitHub secret scanning partner. When a Resend API key is exposed in public repositories, gists, or issues, GitHub alerts Resend, which revokes the key automatically and notifies all admins. This protection is on by default for every account.
Composed body margins are now set to zero.
New resend.suppressions namespace with methods to add, get, list, remove, and batch add or remove suppression list entries.
OAuth 2.1 with PKCE is now available for the Resend API, enabling desktop apps, hosted integrations, and MCP hosts to get scoped access tokens without sharing API keys. Dynamic Client Registration allows MCP hosts to register at runtime, and users can revoke access from their Resend account settings.
Added idempotencyKey parameter to send-email and send-batch-emails tools. Also improved validation ordering when running commands.