Fintech wedge

Your payment stack breaks in minor releases.

Stripe, Plaid and PayPal ship breaking changes that never look like breaking changes: an enum literal reworded, a controller renamed, a response field silently dropped. mendapi tracks each one at the endpoint level and tells you the file and line where it hits — before your reconciliation job does.

Tap to fracture · scroll to mend

The deepest coverage where it hurts most

Stripe

150 breaking changes on record

Payments core. SDK major versions ship type-surface and client-contract changes that break silently at build or run time.

43839 changes tracked · 6 auto-fix migration packs · 138 adjudicated code-fixable.

Full Stripe breaking-change timeline →

Plaid

4 breaking changes on record

Bank data aggregation. Enum literals, request field renames and report-shape changes land in minor-looking releases.

10 changes tracked · 1 auto-fix migration pack · 3 adjudicated code-fixable.

Full Plaid breaking-change timeline →

PayPal

1198 breaking changes on record

Checkout and payouts. Controller renames and full call-signature rewrites across SDK generations.

6958 changes tracked · 13 auto-fix migration packs · 1198 adjudicated code-fixable.

Full PayPal breaking-change timeline →

Built for teams a regulator can ask about

Evidence chain

Every claim links its upstream source

Each entry in our change database records the provider announcement, spec diff or SDK release it came from, with capture date. When an auditor asks why a dependency changed, the answer is one link away — not tribal knowledge.

Audited fixes

Patches that pass review, not vibes

Auto-fix packs are deterministic and gold-regression tested: idempotent, safe on partially migrated code, and refused outright when the underlying rule is stale against newer upstream changes. Draft-grade LLM fixes are labelled as drafts and never auto-applied.

Self-hosted

Nothing leaves your perimeter

The scanner is local-first with zero network calls by default. Enterprise runs the entire stack — scanner, fix engine, change feed — inside your firewall, with your own compute and LLM keys. Security review reads one codebase, not a cloud.

Fintech migration packs, ready today

Stripe: stripe-node v7 -> v8 SDK migration

mendapi fix --migration stripe-v7-to-v8 — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

Stripe: stripe-node v22.3.1: HttpClient / HttpClientResponse exported as interfaces — extends becomes implements

mendapi fix --migration stripe-node-v22-httpclient-interface — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

Stripe: Stripe PaymentIntents: us_bank_account.preferred_settlement_speed withdrawn from the API surface (v2154)

mendapi fix --migration stripe-us-bank-preferred-settlement-speed-removal — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

Stripe: Stripe Terminal configurations: the bgn tipping currency block removed (v2154, Bulgaria euro adoption)

mendapi fix --migration stripe-terminal-tipping-bgn-removal — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

Stripe: Stripe payment records: card_details drops description, iin, issuer and stored_credential_usage (v2324)

mendapi fix --migration stripe-payment-record-card-details-removal — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

Stripe: Stripe payment records: boleto tax_id became nullable on payment-record surfaces (v2183) — guard dereferences with optional chaining

mendapi fix --migration stripe-payment-record-boleto-tax-id-null-guard — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

Plaid: Plaid Node 43.0.0/44.0.0: terminate reason-code type unification, interest-only literal, reports_requested array

mendapi fix --migration plaid-node-v43-v44-breaking-renames — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

PayPal: PayPal Server SDK 1.0.0: controller methods renamed (ordersCreate -> createOrder family)

mendapi fix --migration paypal-server-sdk-v1-controller-renames — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

PayPal: PayPal Server SDK 2.0.0: controller methods switched from positional parameters to a single options object

mendapi fix --migration paypal-server-sdk-v2-options-object — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

PayPal: PayPal Orders v2: the swish and pix payment sources removed entirely (2026-04 spec)

mendapi fix --migration paypal-orders-v2-swish-pix-payment-source-removal — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

PayPal: PayPal Vault v3: paypal/venmo wallet responses drop extended profile fields (birth_date, tax_info, extended name and address fields)

mendapi fix --migration paypal-vault-v3-wallet-profile-fields-removal — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

PayPal: PayPal Vault v3: apple_pay card responses drop PAN-adjacent fields (id, number, expiry, security_code, card_type)

mendapi fix --migration paypal-vault-v3-apple-pay-card-fields-removal — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

PayPal: PayPal Vault v3: error bodies drop the legacy information_link HATEOAS field

mendapi fix --migration paypal-vault-v3-information-link-error-field-removal — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

PayPal: PayPal Subscriptions v1: subscriber responses drop the address object entirely (all fields and address_details subpaths)

mendapi fix --migration paypal-billing-subscriptions-v1-subscriber-address-removal — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

PayPal: PayPal Subscriptions v1: subscriber.shipping_address name and address objects trimmed to core fields (name keeps full_name only; address loses line_3, admin_area_3/4 and the address_details subtree)

mendapi fix --migration paypal-billing-subscriptions-v1-shipping-address-trim — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

PayPal: PayPal Subscriptions v1: subscriber request and response surfaces drop the PII fields birth_date and tax_info (including tax_id and tax_id_type)

mendapi fix --migration paypal-billing-subscriptions-v1-subscriber-pii-removal — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

PayPal: PayPal Partner Referrals v2: the whole business_entity.office_bearers subtree is removed from request and response surfaces (the office_bearer schema itself is gone)

mendapi fix --migration paypal-partner-referrals-v2-office-bearers-removal — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

PayPal: PayPal Partner Referrals v2: phone and address detail schemas trimmed to core fields (phones lose contact_name, inactive, primary, primary_mobile and tags; addresses lose the primary and inactive flags)

mendapi fix --migration paypal-partner-referrals-v2-contact-detail-trim — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

PayPal: PayPal Invoicing v2: error-body HATEOAS links[].method enum drops CONNECT, HEAD and OPTIONS (navigation links keep the full verb set)

mendapi fix --migration paypal-invoicing-v2-error-link-method-enum-shrink — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

PayPal: PayPal Invoicing v2: send-invoice 202 body reshaped from {links: [link, ...]} wrapper to a single link object {href, rel, method}

mendapi fix --migration paypal-invoicing-v2-send-202-body-unwrap — deterministic, idempotent, gold-regression tested. Safe on partially migrated code.

Join the waitlist See Enterprise pricing