API Keys, Stale Order Protection & Stored Value Management

Secure API key system, real-time stale order detection at checkout, payment method management, and consolidated Stored Value settings.
API Keys
Merchants now have a secure API key system for programmatic access. All keys scoped to your organization.
From the new API Keys settings page, you can create secret keys with an optional name, view
existing keys with masked hints and a reveal toggle, see who created each key, and revoke active
keys. Keys use the sk_ prefix and include your platform mode (test/live) for safety.
Stale Order Protection
Customers are now protected from paying stale order amounts. The checkout page polls for order changes every second and shows a full-screen dialog when a merchant modifies an order in Square while checkout is open. The dialog highlights exactly what changed — items added or removed and the new total. A server-side fingerprint check also blocks payment if the order data has changed since the customer last reviewed it.
Payment Method Management
Payment method detail pages are now generic and data-driven. Feature flags, setup actions, and
settlement wallet management are driven by a single PaymentMethodDefinition config, eliminating
method-specific branching. New payment methods work automatically once added to the definitions.
Each detail page now shows the current settlement wallet with a quick action to change it, or fall back to the organization default.
Stored Value Management
Stored Value management has been consolidated into a dedicated dashboard section. The setup wizard, activation checklist, and program editing now live under the Stored Value pages instead of being split across payment method settings.
Minor Improvements
- OTP verification form now disables on success with a polished animation and redirect message.