# Changelog for October 16th, 2026

Simpler first monitor setup for new customers, stronger API access control, and automatic pausing of failing webhooks.

## Improvements
* Simplified creating your first monitor when you sign up.
* Webhook destinations that have been failing for 48 hours are now paused automatically.
* Opening the [MCP URL](https://ohdear.app/mcp) in a browser now shows a landing page.
* Made the status page email subscription pages more consistent, with matching themes and a cleaner layout.
* Updated the expired trial email to let customers know their setup is still saved.
* Updated the OpenAPI documentation to show a 404 status code instead of 403 for resources outside your team and for the reseller endpoints.

## Security
* Email addresses now need to be confirmed by their owner before they count as verified.
* Scoped API tokens can no longer access team-wide endpoints.
* Fixed a low-severity issue where the API revealed which status page IDs exist. Unknown and other accounts’ status pages now return the same 404. Thanks to [Fauzi Susanto](https://www.linkedin.com/in/fauzi-susanto/?isSelfProfile=false) for reporting it responsibly.

## Fixes
* Fixed an issue where a brief outage of our ping endpoint could hide missed scheduled task pings.
* Fixed webhook notifications always showing times in 12-hour format.
* Fixed a server error on the status page email subscriptions screen when no severity or site was selected.
* Fixed the verify email page crashing for users who are not part of a team.