المدوّنة

ملاحظات حول بنية التحقق وتغيّرات التغطية والعمل على الواجهة البرمجية.

تُنشر المقالات بالإنجليزية.

الهندسة٠٩‏/٠٧‏/٢٠٢٦·قراءة 7 دقيقة

Giving an AI agent a scoped key

An agent that can spend money needs a smaller key than the one your backend uses. The scope split we recommend, the MCP config, and the two limits we insist on.

اقرأ المزيد

بقلم Ilya Novak

Engineering

apimcpagentssecurity
الهندسة

Webhook signatures, and why we rejected plain bearer callbacks

Our first callback design put a shared token in the Authorization header. It proved nothing useful. Here is what replaced it and how to verify it in ten lines.

Ilya Novak·١٨‏/٠٢‏/٢٠٢٦·قراءة 6 دقيقة
أدلة

Rentals vs activations: choosing the right primitive

One question decides it: will you ever need to receive a second message on this number, later? Everything else is arithmetic.

Sofia Renard·٣٠‏/٠٩‏/٢٠٢٥·قراءة 6 دقيقة
الهندسة

How we route a purchase across four upstream pools

A buy request touches one offer table, up to three providers and one price formula. This is the whole path, including what happens when the first pool lies about its stock.

Tom Okafor·١٣‏/٠٥‏/٢٠٢٥·قراءة 7 دقيقة
المنتج

Coverage report: 24 countries added in 2024

Twenty-four ISO countries crossed our launch bar last year, three were removed, and one has been sitting in the waiting room since August. The full table.

Sofia Renard·٢١‏/٠١‏/٢٠٢٥·قراءة 6 دقيقة
الشركة

Five years of VirtualSMSNumbers

Founded in Tallinn in 2019 with three countries and a spreadsheet. What the numbers look like now, and the three decisions we got wrong on the way.

Sofia Renard·٠٨‏/١٠‏/٢٠٢٤·قراءة 6 دقيقة
الهندسة

Long-polling beats your retry loop

Six hundred requests to learn one five-digit number is a strange way to spend a rate limit. The ?wait= parameter, the timeouts you have to set, and the loop that actually works.

Tom Okafor·١٩‏/٠٣‏/٢٠٢٤·قراءة 6 دقيقة
أدلة

What virtual numbers cannot do

The honest list. Nine things people expect from a rented number that it will not give them, and what to use instead.

Marta Kwiatkowska·١٢‏/٠٩‏/٢٠٢٣·قراءة 6 دقيقة
الهندسة

Migrating from handler_api.php in an afternoon

Change two constants and your existing bot keeps working. Then, if you want to, move to the REST API properly. Both halves, with the mapping table.

Ilya Novak·١٤‏/٠٢‏/٢٠٢٣·قراءة 6 دقيقة
أدلة

Reading a success-rate badge: what 87 % actually means

It is a trailing seven-day delivery rate with a confidence interval you cannot see. What it measures, what it excludes, and why 87 % on 25 samples tells you almost nothing.

Marta Kwiatkowska·٠٧‏/٠٦‏/٢٠٢٢·قراءة 6 دقيقة
الشركة

Crypto-only billing: the numbers behind the decision

Three acquirer terminations, a 0.9 % chargeback rate on an eleven-cent product, and a conversion hit we are still paying for. The arithmetic, without the ideology.

Marta Kwiatkowska·٢٤‏/٠٨‏/٢٠٢١·قراءة 6 دقيقة
المنتج

Why we refund failed activations automatically

From today, an activation that expires without a message costs nothing. No ticket, no handling fee, no goodwill gesture. The mechanics and the reasoning.

Sofia Renard·٣١‏/٠٣‏/٢٠٢٠·قراءة 5 دقيقة