Changelog

2026-09-18

Changed

• Studio is free until the toll has actually paid you, and then it is an ordinary subscription. It used to be judged month by month: a month the toll paid you enough was billed, a quieter one was not. That was well meant and it made the plan impossible to put a card behind, so nobody could pay automatically and every month needed a click. Now the question is asked once. Studio costs nothing until agents have paid your sites past the threshold on pricing, and from then it is billed every period until you cancel. Everything before that point stays free, nothing is backdated, and we email you when the line is crossed, before the first invoice. Your billing page shows how far along you are.

• You can take Studio yourself. It used to be a request that waited on us. There is nothing to approve for a plan that is free at the moment you take it, so the button on your billing page now just does it, and leaving is the same button. Enterprise is still a conversation, because it is a quote and a capacity agreement.

• A plan change no longer bills you a part month. Changing plan starts a fresh full period at the plan's own price, and whatever you had already paid for is added to the end of it as days rather than deducted as a part refund. It means every invoice is a round, published figure, which is also what makes the card route below work.

Added

• Pay automatically by card. Where the card route is available, your billing page offers to set up automatic payment: your card is charged each period and every charge appears in your invoice history as a paid invoice, so nothing moves out of one place. Cancel whenever you like and your plan stays until the end of the period you have already paid for. Without it, nothing changes: each period raises an invoice you settle yourself, on-chain or by card.

2026-09-16

Added

• Tolls now settle on Arc. Arc opened to the public today and naulon moved to it the same day. It is Circle's own network, built for payments: settlement is final in about a second instead of the fifteen to twenty minutes an Ethereum L2 takes, and the fee to move money off it is a fraction of a cent rather than about a cent on Base. Nothing changes in how you are paid or how you pay. If you set a payout address, it is the same address here: the one you have works on every EVM network. Sites that pick their own settlement network keep it, and Base and the eleven other networks stay available and supported. Buyers funding a balance get the passkey wallet on Arc too, which was not available while Arc was in preview.

• One balance, and the network stopped being your problem. If you run an agent that reads tolled pages, you used to open a spending session, pick a network for it, and watch it expire. That is gone. You now have one balance per side (Test and Live), funded once, and your agents draw on it until you withdraw. Different publishers settle on different networks, so rather than asking you to guess which in advance, naulon watches where your agents tried to pay and could not, and moves part of your balance there. The page shows one figure covering all of it, and money in transit appears as its own line with an honest wait. Each move costs a small network fee, stated before you deposit and itemised in your activity, so you can see what was spent doing it instead of working it out from a balance that came back smaller. Money only moves to a network naulon serves; a publisher settling somewhere unsupported is reported as unreached rather than chased.

• Withdrawals no longer ask you to sign anything. Press Withdraw and the amount lands at your funding source, usually within a minute or two. Circle attests the burn and naulon submits the transaction that lands it, paying the gas. The fee comes out of the amount and the dialog states it before you press. A withdrawal is written down the moment it is attested, so a hiccup between the burn and the landing is retried rather than lost, and you get an email for every one with the amount, the destination and the transaction.

• Your agent can now ask a question before it pays for one. Free sources are read first and returned with the answer. When a paid read is worth making, you see what it cost and whether it actually answered, rather than a line item you have to reconcile by hand later.

Fixed

• The balance page now says where the money comes from. naulon does not sell you USDC and never holds it, so you bring your own. On the live side the page previously assumed you already had some: it told you your funding source was empty, then disabled the only button and stopped. It now shows the address to send to, the network to send it on, and a copy button, and warns that USDC on another network or a different token lands at that same address where nothing can spend it, return it or see it. Your balance updates on its own when you come back to the tab, so there is nothing to press after the transfer. The same instruction is on the funding source card and in the buyer documentation.

• A receiving address now states the network it has to work on. Setting a payout address or a funding source used to name no network at all. A wallet you control works on any of them, but an exchange deposit address is issued for exactly one, and USDC sent to the wrong one is gone. The field says so before you save it, and it now refuses the burn address outright rather than accepting a string that silently destroys anything sent to it.

• A site that runs the toll inside your app can serve a licence. Sites set up through the in-app path could not produce the record a paying agent reads back, so a buyer could pay and then fail to prove what they had bought. The licence now travels with the configuration, and the card that previews it renders the real thing rather than a placeholder.

• The buyer-facing catalogue no longer advertises a price the toll does not charge. The listing and the toll read their price from the same place, so what an agent is quoted is what it pays.

• Payout wallets you already minted are found again. If you created a passkey wallet and the page later claimed you had none, it was looking in the wrong place rather than reporting a real loss. It looks in the right one now, and a failure to reach the wallet provider is reported as a failure instead of being retried forever against an error that was never going to clear.

• Delegating payouts to someone else now works end to end, with the writes recorded, and no path by which a delegated key could be used to set a password.

• Test and Live are now visibly different everywhere. Both sides carry the same mark against the same figure, in the same words, on the balance, earnings and wallet pages. Previously only the Test side was labelled, which left the side that can actually spend real money as the unmarked one.

• Several smaller things: a dialog no longer steals focus back on every keystroke, a deposit banner clears when the deposit lands, a refusal now says what to do about it rather than only that something was refused, and two pages stopped referring to menus that do not exist.

2026-09-06

Added

• Your 402 now says what it costs, in words every crawler understands. Until today the price rode only in the PAYMENT-REQUIRED header, exactly right for an x402 client and blank for everything else that knocked on your door. The 402 now also carries a body naming the price and a crawler-price header, in the vocabulary the large crawlers were already trained on. A buyer written against the vendor-neutral middleware can price your pages without knowing naulon exists. The header advertises; the payment requirement still obligates, so nothing about what a read costs has changed, only how many readers can find it out.

• The same is now true of the snippet. If you install the enforcement script instead of routing your whole site through the toll, your 402 used to emit no price header at all, so you were silent to precisely the crawlers the toll talks to. Same toll, two wires, one answer now.

• A paid response says what was actually charged, in a crawler-charged header taken from the settled figure rather than the quote. The two differ when a payer skips a leg of a multi-author split, and an absent header beats an overstated one.

• Your pages can be listed by x402 catalogs. Discovery there is not a directory you apply to: a resource server declares itself on its own 402, and catalogs list what they see. Yours now declares itself, under your own hostname rather than ours. A catalog full of identical rows helps nobody find your work.

• Buy a licence from your own wallet, on the live rail. A buyer can now purchase a licence for a period directly, and that purchase becomes access for its term.

• The connect dialog reaches ChatGPT. It listed six clients and not the one most people asked about.

Fixed

• The homepage-credit consent described itself backwards. The toggle that lists a settlement on our homepage controls whether the row is attributed: your title, your host, a link back. It never controlled the amount: amounts and timings have always been published on every row, opted in or not. Its hint said "amounts stay anonymized", which is the opposite of what opting in does, in the one sentence you read before consenting. The copy now states the real trade in all five languages. If you opted out believing it hid your numbers, it did not, and you should re-read the setting.

2026-09-03

Added

• Every citation an agent makes can now carry its own proof. A paid read already minted a signed record naming the author who was paid; until today nothing an agent produced carried a link to it. Now every tool that returns a licence also returns a proofUrl, naulon.app/verify?host=<your site>&jti=<id>, and the tools tell the model to cite it beside the source. Opening it fetches the record from the gate that signed it and checks the signature in the reader's own browser; naulon is never asked whether it is valid. Your receipts page and a buyer's licence chip link to the same page for each record, so the thing you hand to someone who does not trust us is a link, not a document to paste.

• Per-path prices. One price for a whole site was always a rough description of most sites: the reference page you wrote once and the investigation that took three months are not the same asset. Prices can now attach to paths, using the same patterns robots.txt has used for thirty years. The most specific rule wins; anything unmatched falls back to your site price.

• Your enforcement settings are served to the snippet, not baked into it. The script you embed now reads its configuration from the gate at request time. Changing what you toll no longer means re-copying a snippet, and a stale copy on one page can no longer disagree with the settings you actually saved.

• Crawler traffic from Exa is visible and priceable alongside every other agent, instead of being charged quietly with nothing in the dashboard explaining it.

Fixed

• Verify has never once worked from inside the app, and now does. The in-app licence check was sending the wrong host and looking the licence up at the wrong address, so a check that should have confirmed a real payment came back empty. Both are corrected, and the check now runs against the same gate that issued the licence.

• A receipt names the chain it settled on. Payouts that landed on one network could be displayed against another, and the earnings ledger could show a row it then denied having.

• Cards no longer weld themselves to the one above. A layout bug on the dashboard made adjacent panels read as a single block at some widths.

2026-09-02

Added

• Anyone can now check a citation licence, without an account and without asking us. Every paid read already minted a signed document naming the resource, the amount and the wallet that was paid. Now there is a page for it: paste one at naulon.app/verify and the signature is checked against the issuing gate's published keys in your own browser. Nothing you paste is sent anywhere, and naulon is never asked whether the licence is valid. That last part is the point. A receipt only your supplier can confirm is a weak receipt; this one is checkable by the person you are trying to convince.

• A permanent record for a citation, separate from the short-lived access token. The licence an agent presents to re-read an article expires in minutes, which is correct for access and useless for a citation someone checks months later. Paid reads now also have a permanent record: it grants nothing, it never expires, and it names the same payment. An expired licence was never proof of nothing, but now there is a document that says so plainly.

• Your site can say what it is. Not everything worth charging an AI to read is an article with a byline. Under Sites → Content, a site is now a publication, a whole site, or files and datasets, and the product follows: a documentation site or a dataset host stops being asked about authors and a review queue it will never use, and the screens count your pages or your files instead of your articles. Setting one up asks the question first, in those words. It changes only the words and the screens you see: what is tolled, what it costs and who is paid are exactly where you set them.

• Agents read the terms you publish, and honour them. naulon has published your licence in RSL, the open licensing standard, since last month. Now the reading side does too. An agent paying through naulon finds a publisher's licence (from robots.txt, a response header, or the page itself), and will not buy a page whose publisher forbids AI use, whatever its budget allows. If a site routes licensing through a licence server, the agent asks that server for a licence and presents it, rather than paying for a page it would not actually be licensed to use. And if a quote comes back well above the price a publisher published, a human is asked first. For buyers has the detail.

• A payment challenge now points at your terms. When our WordPress plugin turns an agent away for payment, the response carries a link to your licence, so a well-behaved agent learns what you allow and what it costs in the same round trip, instead of going back for your robots.txt first.

Fixed

• Search results showed a broken answer to one pricing question. The structured data behind the pricing page's FAQ, the version search engines read, was rendering one answer unfinished while the page itself was correct. Both come from one place now.

Added

• Dated permalinks can be tolled per article. If your posts live at /blog/2026/09/my-post, the toll used to identify every post published that month as 2026: one catalogue entry answering for all of them, or none of them matching and the whole month reading free. Under Toll scope → How your article URLs are shaped, pick Nested and each post is identified by its full path. One level is the default and is exactly what every site did before, so nothing moves unless you change it. Setting up a new site? Pick this before you build your catalogue, because the setting decides how an article is identified, and changing it later re-identifies all of them at once. The screen counts what is at stake and asks before it saves. Getting tolled has the detail.

• A sync now configures a dated site by itself. When we crawl a site that has no sections set yet, we work them out from your feed. A dated permalink scheme used to defeat that: nothing was worked out and nothing was listed. Now the shape is read along with the sections, so those sites list correctly on the first run. A scope you set yourself is never overwritten.

Fixed

• The chain your site settles on is read from the fleet, not from a page. The public site now derives that claim rather than restating it, so it cannot drift from where your money actually lands. The citation licence is stated on the public page too.

• A section list with a folder in the middle no longer prices the folder. The buy-side check that confirms a payment is going to your own wallet reads your URL shape the same way the toll does, so a valid payment naming your wallet can no longer be refused.

2026-09-01

Fixed

• Large catalogues sync completely again. Past about a thousand articles, a sync only ever saw the first slice, so new articles were forced into manual review even with auto-toll on, and older ones were never re-checked against your credits API. Both fixed, whatever the size of your catalogue.

Added

• Charge for your PDFs. A whole-site toll kept a fixed list of file types free so pages still render, and .pdf was on it, so whitepapers and reports were given away. Under Toll scope you can now tick pdf, json, txt or xml to bring them into the toll. Stylesheets, scripts, images and fonts stay free permanently, and your feeds, sitemaps, robots.txt and llms.txt stay free whatever you pick, including WordPress's /wp-sitemap.xml and Yoast's sub-sitemaps, because that is how agents find you in the first place. File types outside that free list, like .csv and .zip, were already tolled and are unaffected. If you publish research, read Tolling files before you tick pdf. Google Scholar needs an abstract that crawlers can read, so the abstract stays free and the paper goes behind the toll.

• A catalogue size on every plan, listed on the pricing page. It applies to growth only: at the limit a sync adds nothing new but keeps refreshing what is already listed, and says on the run that the limit was reached.

• Signing in and signing up say what actually happened. A sign-up with an account already on that address used to tell you to check your inbox for a mail that was never sent; it now says the account exists and offers you the way back in. A failed sign-in lands on a page that explains the reason instead of a blank refusal, an unconfirmed account has a route to confirming itself, and when the mail throttle holds a message back it says so rather than looking broken. The sign-up form also enforces the password rules it displays.

• Your plan and its price agree everywhere they are shown. A run of fixes to the commercial surfaces: a signed customer's page no longer calls a paid plan free or prices a year at the monthly rate, the audit trail no longer names a price nobody was charged, and the toll demo on the marketing site quotes the rate the gate actually charges. The operator console now says which setting is blocking a payment route rather than failing silently.

• Losing a domain is a state you can see and recover from, not a deletion. A hostname can be claimed by several organisations while only one proves it, so a typo in someone else's account can no longer take a name you own.

• Settings show the values they name, and a notice that could not be delivered leaves a record instead of disappearing.

• Domain checks are throttled. They make us fetch a hostname you typed, so there is now a cap per account and per hostname, both far above normal setup. A throttled check returns a wait you can act on, and proving you own a hostname exempts you from the per-hostname cap.

2026-08-28

Added

• Hand a site to someone else. A site's payout wallet answers to exactly one account, the owner's, and until now there was no way to move that. Open a site's Payouts tab and you can transfer it to a teammate who holds owner or admin; the payout wallet goes with it, and only the new owner can hand it back. Changing where money lands is still owner-only: no role widens it, and we can't do it for you.

2026-08-24

Added

• Publish your licence terms, and check they arrive. Your site can now serve an RSL licence at /license.xml, declaring the terms the toll already enforces, with robots.txt pointing at it. The dashboard tells you whether a crawler can actually fetch it from outside.
• Toll a whole site, authors or not. A page with no byline is still worth something. You can charge for every page an agent reads without listing an author for each one; the settlement goes to the site's wallet.

Changed

• No monthly fee until the toll has paid you. Studio is $19/month, and it only bills in a period where the toll paid you at least $100. A quiet month bills nothing and your plan stands: no downgrade, no dunning. The floor tier stays free.

2026-08-21

Added

• Single sign-on across more than one domain, with a verification budget so a half-configured IdP can't spin. If your team signs in from several email domains, one connection now covers them.

2026-08-19

Added

• Sign in with Google. Available on the sign-in screen alongside email and SSO.

Changed

• One set of plan names everywhere: Single site, Studio, Enterprise. The same words now appear on the pricing page, in your settings, and on anything our support team sees, so an upgrade doesn't change name halfway through.

2026-08-18

Changed

• Sign-in, SSO and sign-up are three screens instead of one. Each does one thing, and a broken auth server now says so instead of claiming you are signed out.

2026-08-13

Added

• Your site cap is stated when you start connecting a site, not after the last click.

2026-08-07

Added

• A buyer holds many wallets, split by money plane, so test spending and live spending can never touch the same balance. An agent can be given its own wallet, and a live wallet can be funded and cashed out.

Fixed

• A long list of buyer-wallet corrections: one funding address per mode with the network named beside it, refusals that say what to do next, spending caps that render the real figure, and a cancelled form that leaves nothing behind.

2026-07-24

Changed

• Rebuilt the homepage around one live settlement instrument: a real payment crosses from an agent to the author in USDC and lights up the same row in the ledger beneath it. It's the live pulse, not a canned demo.

2026-07-23

Added

• Payouts go to a wallet you've attested, and only that wallet. Pinning a payout address on a site that isn't set up to be paid is rejected on write, and every change to a payout route is logged where you can read it back.
• Live fleet earnings on the homepage: real settlements as they land.
• Pricing, FAQ, and plain-English Terms and Privacy pages.

Fixed

• Terms and Privacy no longer bounce you to a login screen.

Changed

• Named the settlement stack plainly across the site: x402, Web Bot Auth, Circle USDC, and Arc.