DocsSign in
  • APIs
  • Generators
  • Stacks
  • Projects
  • Docs
  • History
  • Schema
  • Generate
  • feat(broker): require-approval (ask tier) — hold executions for human approval (#1582)latest720Docs253f4622026-10-16 11:34

    Change detail

    27 changes across 16 operations

    • POST/connect-sessions/{session_id}:confirm
      • info

        added the new require-approval enum value to the request property ///

      • info

        added the new require-approval enum value to the request property ///

      • info

        added the new require-approval enum value to the request property ///

      • info

        added the new require-approval enum value to the request property ///

      • info

        added the new require-approval enum value to the request property ///

      • info

        added the new require-approval enum value to the request property ///

      • info

        added the new require-approval enum value to the request property ///

    View all changes (27)
  • fix(admin): authorize every PATCH /users/{id} change, not only email (#1660)2Docsc4f2fb92026-10-16 10:54

    Change detail

    2 changes across 1 operation

    • PATCH/users/{user_id}
      • info

        added the non-success response with the status

      • info

        added the non-success response with the status

  • feat(control): include binding suspended_reason in credential agents listing (#1649)1Docs62f07672026-10-16 10:46

    Change detail

    1 change across 1 operation

    • GET/credentials/{credential_id}/agents
      • info

        added the optional property // to the response with the status

  • fix(auth): report has_api_key on agent list and mutation responses (#1642)no API changesDocsa02e8cc2026-10-16 10:17
  • fix(admin): report real pending and active_now in monitoring usage stats (#1651)no API changesDocscf045e52026-10-16 10:06
  • fix(admin): filter users by derived expired/pending invite state in SQL (#1638)no API changesDocs8926b102026-10-16 09:46
  • chore(main): release 0.43.0 (#1609)no API changesDocse6b03892026-10-14 14:09
  • docs(openapi): hide well-known documents, browser pages and duplicate probes from the control spec (#1629)164Docsa8ef9d82026-10-14 13:48

    Change detail

    20 changes across 16 operations and 4 models

    • GET/.well-known/jwks.json
      • breaking

        api path removed without deprecation

    • GET/.well-known/oauth-authorization-server
      • breaking

        api path removed without deprecation

    • GET/.well-known/oauth-authorization-server/mcp
      • breaking

        api path removed without deprecation

    • GET/.well-known/oauth-protected-resource
      • breaking

        api path removed without deprecation

    • GET/.well-known/oauth-protected-resource/mcp
      • breaking

        api path removed without deprecation

    • GET/auth/health
      • breaking

        api path removed without deprecation

    • GET/authorize
      • breaking

        api path removed without deprecation

    View all changes (20)
  • docs(openapi): declare the confirm discriminator and mirror examples onto schemas and media (#1627)1Docs65dacae2026-10-14 13:18

    Change detail

    1 change across 1 operation

    • POST/connect-sessions/{session_id}:confirm
      • info

        added request discriminator

  • docs(openapi): give every model field and component a realistic example (#1625)no API changesDocs39e67d32026-10-14 13:02
  • feat(openapi): declare the OAuth2 authorization-code scheme alongside BearerAuth (#1624)146Docsb12a9742026-10-14 12:40
  • feat(agents): hard-delete agents with DELETE /agents/{id}?purge=true (#1606)1Docsf0183ca2026-10-14 10:49
  • docs(openapi): describe every parameter, model field, path item and request body (#1617)no API changesDocs38283542026-10-14 10:19
  • docs(openapi): summarise every parameter example and path item (#1616)no API changesDocs65710df2026-10-14 10:03
  • docs(openapi): rewrite summaries and descriptions for 34 operations (#1614)no API changesDocsb2389282026-10-14 09:14
  • feat(openapi): add an example to every control-plane parameter (#1613)no API changesDocs609963e2026-10-13 15:39
  • feat(openapi): fix invalid examples and undocumented error bodies in the control spec (#1611)920Docs5f6c0d72026-10-13 15:15
  • fix(admin): scope user, actor-directory and OAuth grant listings to the caller (#1608)1Docs259f0452026-10-13 14:24
  • chore(main): release 0.42.2 (#1607)no API changesDocs47f10312026-10-13 13:42
  • fix(registry): delete API revisions before the API and explain blocked deletes (#1605)2Docs459dc062026-10-13 13:31
  • fix(broker): evaluate binding rules on the spec-relative operation path (#1552)no API changesDocs31e6b8f2026-10-13 12:52
  • fix(admin): scope audit log reads to the caller and their agents (#1604)no API changesDocs30149952026-10-13 12:50
  • chore(main): release 0.42.1 (#1602)no API changesDocs7db88632026-10-12 13:39
  • fix(ui): show who started a job from the job record, not an empty audit lookup (#1603)6Docs2a16f312026-10-12 12:48
  • chore(main): release 0.42.0 (#1503)no API changesDocs81458942026-10-11 13:00
  • feat(control): connect sessions for registry APIs with human-entered credentials (#1567)1310Docs66d5fc12026-10-09 20:18
  • feat(control): connect-session target kinds, outcomes table and manual-flows gate (#1566)11Docs4326ff42026-10-09 19:44
  • feat(ui): token-less connect approval links and a waiting-for-you inbox (#1562)1Docs9cf776a2026-10-09 19:06
  • feat(control): let agent owners and org:admin act on connect sessions (#1561)12Docs15620de2026-10-09 18:47
  • feat(ui): surface shared OAuth apps in every add-credential flow (#1555)1Docsc6d11042026-10-09 15:38
  • feat(control): admin-registered shared OAuth apps for user SSO (#1435)25Docse25263a2026-10-08 13:57
  • fix(registry): catalog import derives vendor-doubled api_name; warn on unmatched credential scope (#1067)1Docsb30eb072026-10-07 13:34
  • feat(events): remove the event acknowledgement feature (#1400)351Docsd0144012026-10-07 12:42
  • refactor(auth)!: rename internal authorization scopes to permissions (#1399)518Docs3ecdd532026-10-06 15:25
  • fix(auth): answer 404 for agents the caller cannot see on the oauth-grants route (#1534)no API changesDocsde9a8b32026-10-06 13:54
  • fix(control): restrict who can attach a permission rule set (#1528)4Docs14c250e2026-10-06 12:17
  • fix(admin): resolve actor names for any signed-in caller (#1529)1Docs762887b2026-10-06 11:46
  • fix(auth): restrict agent approval to the agent's owner or an admin (#1525)no API changesDocs47b0dc52026-10-06 11:36
  • fix(events): name the credential owner on credential use and health events (#1523)no API changesDocs0a64f9c2026-10-06 11:24
  • fix(admin): scope event reads to the caller (#1508)no API changesDocsd9d93bb2026-10-05 14:51
  • fix(admin): scope execution reads to the caller (#1507)no API changesDocs6d0926a2026-10-05 14:41
  • feat(broker): record operation method + path on executions; steer agents to search-hit targets (#1381)5Docs2f13db42026-10-05 09:39
  • chore(main): release 0.41.0 (#1495)no API changesDocs09878482026-10-01 09:18
  • feat(auth)!: drop the service-account tables (theme 8, phase 4) (#1500)Docs4c04ed92026-09-30 15:38
  • feat(control)!: drop the toolkit tables (theme 5, phase 6b) (#1498)Docsbd5f4902026-09-30 15:28
  • chore(main): release 0.40.1 (#1481)no API changesDocs0ebbf322026-09-30 09:52
  • fix(registry): hold server-host changes on credential-bound APIs for review (#1488)no API changesDocs60a1b612026-09-29 18:50
  • fix(registry): index URLs per revision and serve only live revisions (#1487)no API changesDocs4d6b8a92026-09-29 18:27
  • fix(registry): suspend agent credential bindings when their API is deleted (#1485)4Docs5ce38ae2026-09-29 18:15
  • fix(registry): return the canonical API name from inspect (#1480)no API changesDocsd6498792026-09-29 16:57