Driftwatch

Clerk / Clerk Backend API (2026-05-12) /

Breakingdirection flip: their tools call this safe

private_metadata is no longer accepted

What changed

Usually ignored rather than rejected, so the call succeeds and does something subtly different.

Affects private_metadata on PATCH /organizations/{organization_id}. Grep for it: nothing else will tell you.

Who is affected

Code that sends PATCH /organizations/{organization_id} (private_metadata).

Before and after

WhereBeforeAfter
PATCH /organizations/{organization_id} · private_metadatapresentabsent

Code that breaks

await client.post("/organizations/{organization_id}", {
  // private_metadata is now ignored, not rejected
  private_metadata: value,
});

Based on Clerk’s published API specification. How severity is decided.