# Admin API 3.4 and MCP OAuth

Admin API clients and MCP integrations get a clearer 3.4 surface, new read/media endpoints, and a proper OAuth path for connecting AI clients to Finqu.

## Added

- Admin API version **3.4** (OpenAPI default and client constants moved to 3.4).
- `GET /gift-cards` — merchant-scoped gift card list (search, purchased/expired filters, channel, sort).
- `GET /marketing/discounts/{discountId}` — single discount read.
- `GET /inventories/{inventoryId}/items` — filter by `updated_after` / `updated_before`, stock balance, and sort (`updated_at`, `created_at`, `quantity`, `name`).
- Image flip in media modifications; `POST /media/videos/{id}/process` for video trim/mute/cover-style processing.
- MCP OAuth: discovery, dynamic client registration, consent policy, merchant client sync, and hardened tokens (lifetime caps, refresh families, RFC 8707 resource) so tools like Cursor can connect with the MCP URL.

## Changed

- Broader public OpenAPI coverage for carts, scopes, POS, channel URLs, taxonomy, webhooks, customer portal, and related sale/payment fields.
- Payment metafields are embedded on nested sale payment responses.
- Success Agent text-action Admin API endpoints were unmounted.