2026-11-09: sample apps, guides and the docs MCP (Wave 6.5)#

• New mutation bootstrapSampleApp(sample, webhookUrl), sandbox only (SANDBOX_ONLY everywhere else). It creates a restricted test key and a publishable key for a sample app, a webhook endpoint at webhookUrl (when given) and the sample's demo company, and returns { secretKey, publishableKey, webhookSecret, companyId }. Keys and the secret are shown once. Portal sign-in only (a key cannot call it); at most 5 per day per developer (RATE_LIMITED). A new bootstrap of the same sample revokes that sample's earlier keys and endpoint. See Sample apps. webhookSecret is null when no webhookUrl was given.
• Guides. Five by partner type (Banks, Point of sale, Logistics, E-commerce, Scheduling and hours) and seven by part of FinBaze (Data sources, Messages and routing, Documents, Features and limits, Firms, Lifecycle and migration, Mobile, the last one marked as planned for Wave 6.2). Every GraphQL block in them is validated against the schema in CI.
• Sample apps. neobank-demo, pos-demo, tms-demo, headless-demo, webhook-receivers (Node, Python, PHP) and finbaze-embed-examples, each with an end-to-end script that runs against the sandbox every night.
• References. Errors now lists all 158 codes the API can return, grouped by area (a test fails when the API throws a code that is not listed). Webhook events has the envelope, the signature and a sample delivery for every event. Component props is generated from the registry. Versions and Upgrading explain how versions work and what each release asks of you.
• Security and compliance. A page for vendor-risk reviews, and the sub-processor list generated from the privacy policy.
• Docs MCP. https://mcp.finbaze.com/docs/mcp is a public, read-only MCP server over these docs, with no sign-in and no session. See Docs MCP and llms.txt. llms.txt now groups pages by section, and there is an agent skill for integrating the components into a Next.js app.