release: 9.8.0

.github/workflows/publish-npm.yml

@@ -18,6 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      id-token: write
 
     steps:
       - uses: actions/checkout@v6
@@ -41,7 +42,6 @@ jobs:
           yarn tsn scripts/publish-packages.ts "{ \"paths_released\": \"$PATHS_RELEASED\" }"
         env:
           INPUT_PATH: ${{ github.event.inputs.path }}
-          NPM_TOKEN: ${{ secrets.FINCH_NPM_TOKEN || secrets.NPM_TOKEN }}
 
       - name: Upload MCP Server DXT GitHub release asset
         run: |

.github/workflows/release-doctor.yml

@@ -17,5 +17,3 @@ jobs:
       - name: Check release environment
         run: |
           bash ./bin/check-release-environment
-        env:
-          NPM_TOKEN: ${{ secrets.FINCH_NPM_TOKEN || secrets.NPM_TOKEN }}

.gitignore

@@ -11,3 +11,4 @@ dist-deno
 .eslintcache
 dist-bundle
 *.mcpb
+oidc

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "9.7.0"
+  ".": "9.8.0"
 }

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 46
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/finch/finch-326626d329d2a34acc127d7afe18edb068b1c28a8b50fecb4bb9973d3f9337a4.yml
-openapi_spec_hash: 7559424a86d6c7768cee9c650d0c156c
-config_hash: d21a244fc073152c8dbecb8ece970209
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/finch/finch-c8a0d5eca390ea3ab6e8b5b7d9b46d9a22e34d81aeab444c8ce1b5a94eba0028.yml
+openapi_spec_hash: e261a3289242d3ad52542f1491a903ee
+config_hash: 429708b67ee9e80003db82611677296c

CHANGELOG.md

@@ -1,5 +1,26 @@
 # Changelog
 
+## 9.8.0 (2026-05-07)
+
+Full Changelog: [v9.7.0...v9.8.0](https://github.com/Finch-API/finch-api-node/compare/v9.7.0...v9.8.0)
+
+### Features
+
+* **api:** api update ([d7d9819](https://github.com/Finch-API/finch-api-node/commit/d7d9819bda80e1c61335163a151d836b4d743551))
+* **api:** change auth to npm to oidc ([04f1246](https://github.com/Finch-API/finch-api-node/commit/04f1246dd787aec10cf13f78ad1ab910a234ebf6))
+
+
+### Chores
+
+* redact api-key headers in debug logs ([b1b7308](https://github.com/Finch-API/finch-api-node/commit/b1b7308927f0ad5e2ce0b2b50e2f37bdb8f430df))
+
+
+### Documentation
+
+* clarify forwards compat behavior ([d055d7d](https://github.com/Finch-API/finch-api-node/commit/d055d7daad62c8de922201b4a009f1babc488716))
+* update logging docs ([f3c8c59](https://github.com/Finch-API/finch-api-node/commit/f3c8c591d0514b08c3336979a96afb6fc9862bbc))
+* update with proxy auth info ([da2dfc8](https://github.com/Finch-API/finch-api-node/commit/da2dfc828d54bf3c734df9c96b6fe111d2e4f32b))
+
 ## 9.7.0 (2026-04-30)
 
 Full Changelog: [v9.6.0...v9.7.0](https://github.com/Finch-API/finch-api-node/compare/v9.6.0...v9.7.0)

bin/check-release-environment

@@ -2,10 +2,6 @@
 
 errors=()
 
-if [ -z "${NPM_TOKEN}" ]; then
-  errors+=("The NPM_TOKEN secret has not been set. Please set it in either this repository's secrets or your organization secrets")
-fi
-
 lenErrors=${#errors[@]}
 
 if [[ lenErrors -gt 0 ]]; then

bin/publish-npm

@@ -2,7 +2,12 @@
 
 set -eux
 
-npm config set '//registry.npmjs.org/:_authToken' "$NPM_TOKEN"
+if [[ ${NPM_TOKEN:-} ]]; then
+  npm config set '//registry.npmjs.org/:_authToken' "$NPM_TOKEN"
+elif [[ ! ${ACTIONS_ID_TOKEN_REQUEST_TOKEN:-} ]]; then
+  echo "ERROR: NPM_TOKEN must be set if not running in a Github Action with id-token permission"
+  exit 1
+fi
 
 yarn build
 cd dist
@@ -57,5 +62,9 @@ else
   TAG="latest"
 fi
 
+# Install OIDC compatible npm version
+npm install --prefix ../oidc/ npm@11.6.2
+
 # Publish with the appropriate tag
-yarn publish --tag "$TAG"
+export npm_config_registry='https://registry.npmjs.org'
+../oidc/node_modules/.bin/npm publish --tag "$TAG"

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tryfinch/finch-api",
-  "version": "9.7.0",
+  "version": "9.8.0",
   "description": "The official TypeScript library for the Finch API",
   "author": "Finch <founders@tryfinch.com>",
   "types": "dist/index.d.ts",

packages/mcp-server/manifest.json

@@ -1,7 +1,7 @@
 {
   "dxt_version": "0.2",
   "name": "@tryfinch/finch-api-mcp",
-  "version": "9.7.0",
+  "version": "9.8.0",
   "description": "The official MCP Server for the Finch API",
   "author": {
     "name": "Finch",

packages/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tryfinch/finch-api-mcp",
-  "version": "9.7.0",
+  "version": "9.8.0",
   "description": "The official MCP Server for the Finch API",
   "author": "Finch <founders@tryfinch.com>",
   "types": "dist/index.d.ts",

packages/mcp-server/src/server.ts

@@ -29,7 +29,7 @@ export const newMcpServer = async ({
   new McpServer(
     {
       name: 'tryfinch_finch_api_api',
-      version: '9.7.0',
+      version: '9.8.0',
     },
     {
       instructions: await getInstructions({ stainlessApiKey, customInstructionsPath }),

src/internal/utils/log.ts

@@ -107,6 +107,8 @@ export const formatRequestDetails = (details: {
           name,
           (
             name.toLowerCase() === 'authorization' ||
+            name.toLowerCase() === 'api-key' ||
+            name.toLowerCase() === 'x-api-key' ||
             name.toLowerCase() === 'cookie' ||
             name.toLowerCase() === 'set-cookie'
           ) ?

src/resources/hris/benefits/benefits.ts

@@ -141,12 +141,12 @@ export type CompanyBenefitsSinglePage = SinglePage<CompanyBenefit>;
 export type SupportedBenefitsSinglePage = SinglePage<SupportedBenefit>;
 
 export type BenefitContribution =
-  | BenefitContribution.UnionMember0
-  | BenefitContribution.UnionMember1
-  | BenefitContribution.UnionMember2;
+  | BenefitContribution.BenefitContributionFixed
+  | BenefitContribution.BenefitContributionPercent
+  | BenefitContribution.BenefitContributionTiered;
 
 export namespace BenefitContribution {
-  export interface UnionMember0 {
+  export interface BenefitContributionFixed {
     /**
      * Contribution amount in cents.
      */
@@ -158,7 +158,7 @@ export namespace BenefitContribution {
     type: 'fixed';
   }
 
-  export interface UnionMember1 {
+  export interface BenefitContributionPercent {
     /**
      * Contribution amount in basis points (1/100th of a percent).
      */
@@ -170,20 +170,20 @@ export namespace BenefitContribution {
     type: 'percent';
   }
 
-  export interface UnionMember2 {
+  export interface BenefitContributionTiered {
     /**
      * Array of tier objects defining employer match tiers based on employee
      * contribution thresholds.
      */
-    tiers: Array<UnionMember2.Tier>;
+    tiers: Array<BenefitContributionTiered.Tier>;
 
     /**
      * Tiered contribution type (only valid for company_contribution).
      */
     type: 'tiered';
   }
 
-  export namespace UnionMember2 {
+  export namespace BenefitContributionTiered {
     export interface Tier {
       match: number;
 

src/resources/hris/benefits/individuals.ts

@@ -116,15 +116,15 @@ export interface EnrolledIndividualBenefitResponse {
 }
 
 export interface IndividualBenefit {
-  body: IndividualBenefit.UnionMember0 | IndividualBenefit.BatchError;
+  body: IndividualBenefit.IndividualBenefit | IndividualBenefit.BatchError;
 
   code: number;
 
   individual_id: string;
 }
 
 export namespace IndividualBenefit {
-  export interface UnionMember0 {
+  export interface IndividualBenefit {
     /**
      * If the benefit supports annual maximum, the amount in cents for this individual.
      */
@@ -142,25 +142,28 @@ export namespace IndividualBenefit {
      * matching structures.
      */
     company_contribution:
-      | UnionMember0.UnionMember0
-      | UnionMember0.UnionMember1
-      | UnionMember0.UnionMember2
+      | IndividualBenefit.CompanyContributionFixed
+      | IndividualBenefit.CompanyContributionPercent
+      | IndividualBenefit.CompanyContributionTiered
       | null;
 
     /**
      * Employee deduction configuration. Supports both fixed amounts (in cents) and
      * percentage-based contributions (in basis points where 100 = 1%).
      */
-    employee_deduction: UnionMember0.UnionMember0 | UnionMember0.UnionMember1 | null;
+    employee_deduction:
+      | IndividualBenefit.EmployeeDeductionContributionFixed
+      | IndividualBenefit.EmployeeDeductionContributionPercent
+      | null;
 
     /**
      * Type for HSA contribution limit if the benefit is a HSA.
      */
     hsa_contribution_limit?: 'individual' | 'family' | null;
   }
 
-  export namespace UnionMember0 {
-    export interface UnionMember0 {
+  export namespace IndividualBenefit {
+    export interface CompanyContributionFixed {
       /**
        * Contribution amount in cents (for type=fixed) or basis points (for type=percent,
        * where 100 = 1%). Not used for type=tiered.
@@ -174,7 +177,7 @@ export namespace IndividualBenefit {
       type: 'fixed';
     }
 
-    export interface UnionMember1 {
+    export interface CompanyContributionPercent {
       /**
        * Contribution amount in cents (for type=fixed) or basis points (for type=percent,
        * where 100 = 1%). Not used for type=tiered.
@@ -188,12 +191,12 @@ export namespace IndividualBenefit {
       type: 'percent';
     }
 
-    export interface UnionMember2 {
+    export interface CompanyContributionTiered {
       /**
        * Array of tier objects defining employer match tiers based on employee
        * contribution thresholds. Required when type=tiered.
        */
-      tiers: Array<UnionMember2.Tier>;
+      tiers: Array<CompanyContributionTiered.Tier>;
 
       /**
        * Contribution type. Supported values: "fixed" (amount in cents), "percent"
@@ -202,15 +205,15 @@ export namespace IndividualBenefit {
       type: 'tiered';
     }
 
-    export namespace UnionMember2 {
+    export namespace CompanyContributionTiered {
       export interface Tier {
         match: number;
 
         threshold: number;
       }
     }
 
-    export interface UnionMember0 {
+    export interface EmployeeDeductionContributionFixed {
       /**
        * Contribution amount in cents (for type=fixed) or basis points (for type=percent,
        * where 100 = 1%).
@@ -224,7 +227,7 @@ export namespace IndividualBenefit {
       type: 'fixed';
     }
 
-    export interface UnionMember1 {
+    export interface EmployeeDeductionContributionPercent {
       /**
        * Contribution amount in cents (for type=fixed) or basis points (for type=percent,
        * where 100 = 1%).

src/resources/hris/employments.ts

@@ -36,10 +36,10 @@ export class Employments extends APIResource {
 
 export type EmploymentDataResponsesPage = ResponsesPage<EmploymentDataResponse>;
 
-export type EmploymentData = EmploymentData.UnionMember0 | EmploymentData.BatchError;
+export type EmploymentData = EmploymentData.EmploymentData | EmploymentData.BatchError;
 
 export namespace EmploymentData {
-  export interface UnionMember0 {
+  export interface EmploymentData {
     /**
      * A stable Finch `id` (UUID v4) for an individual in the company.
      */
@@ -53,12 +53,12 @@ export namespace EmploymentData {
     /**
      * The department object.
      */
-    department: UnionMember0.Department | null;
+    department: EmploymentData.Department | null;
 
     /**
      * The employment object.
      */
-    employment: UnionMember0.Employment | null;
+    employment: EmploymentData.Employment | null;
 
     /**
      * The detailed employment status of the individual.
@@ -103,7 +103,7 @@ export namespace EmploymentData {
     /**
      * The manager object representing the manager of the individual within the org.
      */
-    manager: UnionMember0.Manager | null;
+    manager: EmploymentData.Manager | null;
 
     /**
      * The legal middle name of the individual.
@@ -122,7 +122,7 @@ export namespace EmploymentData {
      * employer in the system. Custom fields are not currently supported for assisted
      * connections.
      */
-    custom_fields?: Array<UnionMember0.CustomField> | null;
+    custom_fields?: Array<EmploymentData.CustomField> | null;
 
     /**
      * The employee's income as reported by the provider. This may not always be
@@ -147,7 +147,7 @@ export namespace EmploymentData {
     work_id?: string | null;
   }
 
-  export namespace UnionMember0 {
+  export namespace EmploymentData {
     /**
      * The department object.
      */

src/resources/hris/individuals.ts

@@ -34,10 +34,10 @@ export class Individuals extends APIResource {
 
 export type IndividualResponsesPage = ResponsesPage<IndividualResponse>;
 
-export type Individual = Individual.UnionMember0 | Individual.BatchError;
+export type Individual = Individual.Individual | Individual.BatchError;
 
 export namespace Individual {
-  export interface UnionMember0 {
+  export interface Individual {
     /**
      * A stable Finch `id` (UUID v4) for an individual in the company.
      */
@@ -79,7 +79,7 @@ export namespace Individual {
      */
     middle_name: string | null;
 
-    phone_numbers: Array<UnionMember0.PhoneNumber | null> | null;
+    phone_numbers: Array<Individual.PhoneNumber | null> | null;
 
     /**
      * The preferred name of the individual.
@@ -88,7 +88,7 @@ export namespace Individual {
 
     residence: HRISAPI.Location | null;
 
-    emails?: Array<UnionMember0.Email> | null;
+    emails?: Array<Individual.Email> | null;
 
     /**
      * Social Security Number of the individual in **encrypted** format. This field is
@@ -106,7 +106,7 @@ export namespace Individual {
     ssn?: string | null;
   }
 
-  export namespace UnionMember0 {
+  export namespace Individual {
     export interface PhoneNumber {
       data: string | null;
 

src/version.ts

@@ -1 +1 @@
-export const VERSION = '9.7.0'; // x-release-please-version
+export const VERSION = '9.8.0'; // x-release-please-version