Changelog

This release adds the ability to detach environments from MCP servers and fixes authentication for org-scoped credit usage.

Features

• Detach environments from MCP servers #1934 - Added the ability to detach an environment from an MCP server, giving more flexibility in environment management. (Author: @simplesagar)

Bug fixes

• Fix org-scoped chat credit usage authentication #1935 - Fixed GET /rpc/chat.creditUsage authentication so org-scoped credit usage works correctly for customers with multiple projects, requiring only session auth. (Author: @disintegrator)
• Show coming soon placeholder on CLIs page #1929 - Added a coming soon placeholder on the CLIs page. (Author: @simplesagar)
• Fix CLI update when using Homebrew #1931 - Fixed an issue where the CLI update command didn't work correctly when installed via Homebrew. (Author: @aditya-mitra)

This release doubles the memory allocation for Gram Function runners and adds a table view option for list pages in the dashboard.

Features

• Increased Gram Function runner memory to 1 GB #1922 - Gram Function runners now run with 1 GB of memory instead of 512 MB, providing more headroom for memory-intensive operations. (Author: @disintegrator)
• Table view toggle for list pages #1894 - Added a grid/table view toggle for MCP, Sources, and Catalog list pages with animated dot-pattern rows and localStorage persistence. (Author: @adaam2)

Bug fixes

• Fix MCP environments default display #1898 - Fixed an issue where the MCP environments section displayed the wrong default when no environment was attached. (Author: @simplesagar)
• Prevent double-back-button on detail pages #1907 - Fixed a navigation issue where detail pages rendered two back buttons. (Author: @simplesagar)

This release fixes OAuth discovery in the playground to use toolset-level configuration and sets error status on MCP tool results based on HTTP response codes.

Features

• Display audience field in OAuth proxy server details #1862 - The OAuth proxy server details view now displays the audience field. (Author: @simplesagar)
• Set isError on MCP tool results based on HTTP status #1887 - MCP tool results now have isError set based on the HTTP response status code, improving error visibility for tool calls. (Author: @minuteman3)

Bug fixes

• Fix playground OAuth discovery #1861 - Resolved an issue where the playground OAuth discovery relied on removed tool-definition fields. OAuth requirements are now detected from toolset.oauthProxyServer and toolset.externalOauthServer at the toolset level. (Author: @simplesagar)

This release adds admin-only cache purging for MCP registries, improves HTTP status attribute references in MCP logs, and removes the deprecated logs enabled flag from the telemetry API.

Features

• Admin-only cache purging for MCP registries #1815 - Added a clearCache endpoint restricted to admin users for purging MCP registry caches. (Author: @ndimares)

Bug fixes

• Correct HTTP status attribute references in MCP logs #1814 - Fixed incorrect HTTP status attribute references in MCP logs search to surface the correct values. (Author: @simplesagar)
• Remove logs enabled flag from telemetry API #1811 - Removed the deprecated enabled field from telemetry API responses. (Author: @tgmendes)
• Remove automatic browser opening on deployment #1807 - The CLI no longer automatically opens the browser when a deployment completes. The URL is printed to the console instead. (Author: @disintegrator)

This release unifies the OAuth configuration pathway for external MCP servers and adds a dedicated dashboard page for managing hooks.

Features

• Unified OAuth for external MCP servers #1797 - External MCP servers now use the same OAuth configuration pathway as all other toolsets, removing special-cased token resolution. The "Configure OAuth" button is enabled for external MCP servers that require OAuth, and discovered OAuth metadata can auto-populate the configuration form with a single click. (Author: @qstearns)
• Hooks dashboard page #1767 - Added a dedicated dashboard page for viewing and managing hooks. (Author: @chase-crumbaugh)

This release fixes several issues with the feedback UI and improves the settings page experience.

Bug fixes

• Feedback UI improvements #1774 - Set showFeedback default to true to match documentation, improved dark mode styling for feedback buttons, and updated the system prompt to prevent multiple generative UI widgets per response. (Author: @adaam2)
• Settings page with tabs routing #1747 - Improved the settings page with tabbed routing and logging API integration. (Author: @adaam2)

This release introduces an initial implementation of Gram hooks for tool capture, adds dynamic attribute filtering for telemetry logs, and enables passing authenticated user emails to functions.

Features

• Gram hooks for tool capture #1755 - Added Gram hooks that capture tool invocations, enabling observability into tool usage. (Author: @chase-crumbaugh)
• Telemetry attribute filtering #1751 - Added the ability to filter telemetry logs by dynamic attributes on the logs page. (Author: @tgmendes)
• Identity passthrough for functions #1771 - Function authors can now receive the authenticated Gram user's email by setting gramEmail: true in the authInput config, populating the GRAM_USER_EMAIL environment variable. (Author: @qstearns)
• Settings page improvements #1747 - Improved the settings page with tabbed routing and logging API integration. (Author: @adaam2)
• Server instructions section #1729 - Moved server instructions to a dedicated section with LLM-generated best practices for MCP server instructions. (Author: @simplesagar)
• External auth user ID tracking #1746 - Added the ability to track external auth user IDs in telemetry logs by extracting JWT subject from external MCP OAuth tokens. (Author: @tgmendes)
• Zod v4 upgrade #1717 - Upgraded Zod to v4 across the monorepo and bumped @modelcontextprotocol/sdk. (Author: @qstearns)

Bug fixes

• Telemetry timestamp format #1754 - Updated the telemetry search logs API response to send unix nanosecond timestamps as strings instead of integers, preventing precision loss. (Author: @tgmendes)

This release adds the ability to install Slack apps directly through the Gram dashboard, and introduces a new CLI command for cloning and redeploying existing deployments.

Features

• Slack app installation through Gram UI #1711 - Added the ability to install Slack apps through the Gram UI with OAuth-based installation, per-app event handling, and legacy cleanup. (Author: @qstearns)
• Redeploy CLI command #1721 - Added gram redeploy command to clone and redeploy existing deployments, with a visible redeploy button on every deployment detail page and deployments navigation on the sources page. (Author: @simplesagar)

Bug fixes

• Tool call logs count shown but empty state #1708 - Fixed an issue where the tool call logs count was displayed but the content showed an empty state. (Author: @simplesagar)

This release adds telemetry attribute key listing and arbitrary attribute filtering to the logs API, and exposes project logs as a built-in MCP server for querying through any LLM client.

Features

• Telemetry attribute key listing API #1712 - Added a listAttributeKeys endpoint to retrieve distinct attribute keys for telemetry filtering. (Author: @tgmendes)
• Arbitrary attribute filtering for search logs #1701 - Added a new filtering option to the search logs endpoint to filter by any attribute. (Author: @tgmendes)
• Built-in logs MCP server #1665 - Exposed project MCP logs as a built-in logs MCP server that comes pre-deployed, enabling interaction with logs through any LLM client. (Author: @simplesagar)

Bug fixes

• Source detail page crash without logs #1687 - Prevented the source detail page from crashing when logs are not enabled by gracefully degrading without metrics. (Author: @qstearns)
• Logs page and AI Insights UI improvements #1658 - Improved logs page timestamp display, fixed tree line alignment in expanded log rows, filtered out chat completion logs from tool calls list, added click-outside-to-close for AI Insights sidebar, and removed Beta labels from AI Insights. (Author: @adaam2)
• Diagnostic hints for function runner failures #1698 - Added diagnostic hints for Node.js module loading failures in the functions runner. (Author: @simplesagar)

This release adds opt-in logging for tool call inputs and outputs, and redesigns the source detail page with a two-panel layout showing deployments and invocation activity.

Features

• Opt-in tool call input/output logging #1657 - Added an opt-in toggle to record tool call inputs and outputs in logs for easier debugging and observability. (Author: @tgmendes)
• Redesigned source detail page #1577 - Redesigned the source detail page with a two-panel layout showing deployments and invocation activity, giving a high-level overview of a source's utilization across MCP servers. (Author: @simplesagar)

Bug fixes

• Open CORS policy on /openapi.yaml #1659 - Updated CORS policy on /openapi.yaml and set the content type to text/yaml to avoid browser download prompts. (Author: @disintegrator)
• Wire up add another button in environment variables sheet #1639 - Fixed the "Add another" button in the environment variables sheet to properly add new variable rows. (Author: @simplesagar)

This release makes the Temporal task queue configurable to support staging and preview deployments.

Features

• Configurable Temporal task queue #1646 - Refactored the server to make the Temporal task queue configurable, unblocking staging and preview deploys. (Author: @disintegrator)

This release fixes an issue where the toolsToInclude filter became stale when navigating between pages.

Bug fixes

• Fix stale toolsToInclude on navigation #1642 - Fixed stale toolsToInclude when client-side navigating between pages by applying the filter outside the query. (Author: @adaam2)

This release displays Elements errors directly in the chat interface and adds automatic session token refresh before chat requests.

Features

• Show Elements errors inside the chat #1633 - Elements errors now appear directly in the chat conversation for easier debugging. (Author: @chase-crumbaugh)
• Auto-refresh expired session tokens #1615 - Added JWT expiry detection with a 30-second buffer, deduplicates concurrent refresh calls via fetchQuery, and falls back to the stale token on failure. Refresh is automatic for non-static sessions and skipped during replays. (Author: @walker-tx)

This release surfaces Elements errors directly inside the chat interface and reorders the insights dashboard to prioritize tool metrics.

Features

• Reorder insights dashboard #1641 - Reordered the insights dashboard to show tool metrics first, making the most actionable data immediately visible. (Author: @simplesagar)

Bug fixes

• Show Elements errors inside the chat #1633 - Elements errors now appear inline within the chat interface instead of failing silently. (Author: @chase-crumbaugh)

This release removes the createTanStackStartSessionFn helper to prevent potential API key exposure in client-side bundles.

Bug fixes

• Remove createTanStackStartSessionFn #1619 - Removed createTanStackStartSessionFn to prevent API key exposure in client-side code. (Author: @walker-tx)

This release improves MCP server authentication by automatically attempting OAuth discovery when servers return an auth rejected error, and fixes same-origin request failures in chat sessions.

Features

• CLI commands tab in OpenAPI version update modal #1624 - Added a CLI commands tab to the OpenAPI version update modal for quick access to CLI-based update workflows. (Author: @simplesagar)

Bug fixes

• OAuth discovery for MCP servers returning AuthRejectedError #1597 - When an MCP server returns a 401 without a WWW-Authenticate header, the platform now attempts OAuth discovery instead of silently skipping authentication setup. This fixes the missing authentication section for catalog MCP servers that don't implement OAuth 2.1 natively. (Author: @simplesagar)
• Same-origin requests in chat sessions CORS #1616 - Fixed "Origin does not match audience claim" errors for same-origin requests. The middleware now validates the Host header against audience claims when the Origin header is absent, allowing legitimate same-origin requests while still preventing cross-origin bypass attacks. (Author: @adaam2)

This release adds a dangerousApiKey auth option for quick dev and testing without a backend session endpoint, and introduces a unified session field on ApiConfig.

Features

• dangerousApiKey auth and unified session field #1611 - Added dangerousApiKey auth option that automatically exchanges an API key for a session token. Also introduced a unified session field on ApiConfig that accepts either a static token string or an async fetcher function. The previous sessionToken and sessionFn fields still work but are now deprecated. (Author: @walker-tx)

This release adds tool annotation support to the Gram functions framework and persists annotations from external MCP servers to the database.

Features

• Tool annotations in functions framework #1571 - Added ToolAnnotations type allowing function authors to specify annotations via Gram.tool({ annotations: { ... } }). (Author: @simplesagar)
• Persist external MCP tool annotations #1596 - Annotations from external MCP servers in the Catalog are now persisted to the database. (Author: @simplesagar)

This release adds tool annotation badges to the sidebar, restores resources and prompts tabs on MCP detail pages, and fixes external MCP tool deployment stats.

Features

• Resources and prompts tabs on MCP details page #1555 - Restored the resources and prompts tabs to the MCP server details page. (Author: @simplesagar)
• Tool annotation badges in sidebar #1570 - Added tool annotation badges to the tool list sidebar for quick visibility into tool behavior hints. (Author: @simplesagar)

Bug fixes

• External MCP tool deployment stats #1585 - Fixed an issue where external MCP tools were not accounted for in deployment stats. (Author: @qstearns)

This release introduces a comprehensive observability suite including telemetry logs, traces, chat logs with AI-powered resolution analysis, and an overview dashboard with time-series metrics.

Features

• Observability overview page #1551 - Added observability features including telemetry logs, traces, chat logs with AI-powered resolution analysis, and an overview dashboard with time-series metrics. (Author: @adaam2)
• Chat logs improvements #1563 - Improved observability chat logs with server-side sorting, sticky pagination with page count, N/A score indicator with tooltip for unscored sessions, Shiki syntax highlighting for code blocks, character-based truncation with "Show more" button, System Prompt tab in chat detail panel, and tool result labeling for tool messages. (Author: @adaam2)
• 4xx HTTP responses treated as errors #1565 - Added a system prompt instruction to treat 4xx HTTP responses as errors in AI observability analysis. (Author: @adaam2)

Bug fixes

• OpenAPI spec URL upload preview #1506 - Fixed a UI bug where the OpenAPI spec provided by URL upload was not fetched, leading to a blank preview. (Author: @DhashS)

This patch release adds support for MCP tool annotations in the elements library, providing additional metadata about tool behavior to help clients understand how to present and manage tools.

Features

• MCP tool annotations support #1553 - Added support for MCP tool annotations including title, readOnlyHint, destructiveHint, idempotentHint, and openWorldHint. Annotations can be edited in the Playground or in the tools tab of a specific MCP server. (Author: @simplesagar)

This release adds support for MCP tool annotations, providing additional metadata about tool behavior to help clients understand how to present and manage tools.

Features

• MCP tool annotations support #1553 - Added support for MCP tool annotations on external MCP servers sourced from the Catalog as well as HTTP-based tools. Annotations include title, readOnlyHint, destructiveHint, idempotentHint, and openWorldHint. Tool annotations can be edited in the Playground or in the tools tab of a specific MCP server. (Author: @simplesagar)

This release adds new telemetry capabilities including a user usage data endpoint, API key tracking in telemetry logs, and chat resolution statistics.

Features

• User usage telemetry endpoint #1519 - Added a new telemetry endpoint to fetch user usage data. (Author: @tgmendes)
• API key ID in telemetry logs #1517 - Added recording of the API key ID in telemetry logs for better traceability. (Author: @walker-tx)
• Chat resolution stats in telemetry #1522 - Added chat resolution statistics to telemetry metrics. (Author: @tgmendes)

Bug fixes

• Deployment log timestamps #1507 - Fixed deployment log line timestamps to show the date alongside the time. (Author: @simplesagar)

This release overhauls the chart plugin and generative UI system with React 19 compatibility, themed components, and improved developer experience.

Features

• Chart plugin overhaul #1539 - Replaced Vega-Lite with Recharts for React 19 compatibility, added themed tooltips using CSS variables with oklch colors, and updated chart stories to use MCP orders summary tool. (Author: @adaam2)
• Generative UI improvements #1539 - Added macOS-style window frames with traffic light buttons and whimsical cycling loading messages with fade transitions. Streamlined LLM prompt from approximately 150 lines to a concise bulleted format. (Author: @adaam2)

Bug fixes

• ActionButton tool execution #1539 - Fixed ActionButton to execute tools via the useToolExecution hook. Aligned Text, Badge, and Progress props with the LLM prompt specification. Fixed catalog schema toolName to action mismatch and setTimeout cleanup in CyclingLoadingMessage. (Author: @adaam2)