March 11, 2026

Taskade developer changelog — March 11, 2026: PKCE Enabled for All Flow OAuth2 Integrations, Custom Domain SSL: Delegated DCV + Reliability Improvements.

Developer highlights. This section tracks API, MCP, SDK, automation, and Taskade Genesis platform changes for developers. For the full product changelog see taskade.com/changelog; for release newsletters see taskade.com/blog/updates.

What's New:

PKCE Enabled for All Flow OAuth2 Integrations

All automation OAuth2 credential connections now use Proof Key for Code Exchange (PKCE). PKCE was enabled for the OAuth2 strategy powering Flow connections, which protects authorization-code exchanges against interception attacks. No action is required for existing connected credentials; new connections automatically use PKCE.

Reference: Automation Integrations

---

Custom Domain SSL: Delegated DCV + Reliability Improvements

Managed custom domain SSL provisioning now uses Cloudflare delegated Domain Control Validation (DCV). Instead of requiring the app owner to add a TXT record per certificate renewal, a single CNAME delegation record handles all future renewals automatically.

Additional reliability improvements shipped alongside this:

• SSL provisioning now uses GET-after-POST verification with Fibonacci backoff to avoid race conditions in Cloudflare hostname activation.

• The domain purchase flow now validates that the Genesis app has been built before allowing a custom domain to be attached, preventing provisioning errors on unpublished apps.

Reference: Custom Domains