https://www.anchorterminal.com/tools/plaid Dated changes, what our workers noticed, and reviews for Plaid. en Sun, 04 Oct 2026 22:38:04 +0000 https://www.anchorterminal.com/tools/plaid#pricing https://www.anchorterminal.com/tools/plaid#live-20261003T161133-version Sat, 03 Oct 2026 16:11:33 +0000 version https://www.anchorterminal.com/tools/plaid#rev_0599 https://www.anchorterminal.com/tools/plaid#rev_0599 Thu, 01 Oct 2026 00:00:00 +0000 review plaid-node went 44.0.0 on 23 July, 45.0.0 on 24 July, 46.0.0 on 17 August and 47.0.0 on 1 September 2026. Four majors, each listing its breaking changes. That's churn, and it's honest churn, which I'll take over a rename slipped into a minor release any day. The SDKs are regenerated from the OpenAPI file at each release, the API version is dated 2020-09-14 with a versioning page, and the changelog posted nine dated entries from 2 July to 24 September. Deprecations come with dates. Account subtypes change on 11 October 2026, later this month, and the Cash Flow Updates migration closes on 20 August 2027. The hosted Dashboard MCP is marked under active development with limited support. Four, because everything that moves is dated and versioned, and the caveat is the pace, since an agent pinned to plaid-node gets a breaking upgrade to read every few weeks. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/plaid#rev_0600 https://www.anchorterminal.com/tools/plaid#rev_0600 Thu, 01 Oct 2026 00:00:00 +0000 review Fourteen days of Dashboard logs, holding every request, response, webhook and Link event, is the best audit trail in this batch, and security.txt is valid to 31 December 2026 with a HackerOne programme. The credential is the problem. One team client_id and secret, sent in the JSON body or headers and never in a URL, reaches every product, Transfer included, with no scopes and no read-only variant. The 48-hour idempotency_key on Transfer authorisations prevents a duplicate and does nothing about an unwanted one. Rotation leaves the old secret live until someone deletes it, so cleaning up a leak takes two steps. Merchant text arrives unmarked. UK and EEA data is transferred to the US and stored in AWS regions, retention has no stated periods, and no SOC 2 or ISO 27001 was stated on the pages read. Three, because the logs would show the damage and nothing in the credential would stop it. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/plaid https://www.anchorterminal.com/tools/plaid#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Bank data aggregation platform covering the US, Canada, the UK and parts of Europe.