What we're building in May

April update. Three things we're putting hours into right now:

1. 2FA for tenant users

Admin users have it; tenant users (your users) don't. We're adding TOTP-based 2FA with optional WebAuthn for tenants on Growth and above. Target: May 12. Backwards compatible — existing users get a dashboard prompt, can opt in any time.

2. Self-serve API key scoping

Currently API keys are scoped via roles. We're adding capability scopes — a key can be issued for “wallets:read + transactions:read” with no withdrawal capability, useful for monitoring tools and read-only integrations. Target: May 20.

3. CSV export everywhere

We have transactions export. Adding the same to wallets, audit logs, fees, and webhook delivery history. Target: May 27.

Plus the SOC 2 controls-and-evidence package, which is dragging from Q1. We're engaging a second auditor for the gap analysis.

Questions on any of the above? hello@swydex.com.