Opening your Organization Gateway URL in a browser now shows who it's for and how to connect, instead of a blank 404, and admins get an Activity tab showing calls across every project. Adding a server through Platform MCP no longer requires a plugin first: it works from the connection you already have, and the step to share it is optional. More on this in Organization gateway and Platform MCP.

Features

• The Organization Gateway has a landing page — Opening the gateway's URL in a browser shows members the server address and setup steps for Claude Code, Claude, Codex, Cursor, VS Code, opencode, ChatGPT, and other MCP clients, and asks anyone signed out to sign in first. People outside the organization still see "Not found." (#8312, @danielkov)
• Turning on the Organization Gateway takes one confirmation — Enabling it now asks a single confirmation that recommends reviewing MCP assignments, instead of requiring the full assignment review to load first. Organization admins can also always read a server's access rules, so the review no longer fails for admins blocked from a server. (#7969, @chase-crumbaugh)
• The Organization Gateway gets an Activity tab — See calls dispatched through the gateway across every project: totals, errors, calls over time, discovery steps agents took, and calls by server. It's also in Command K as "Organization Gateway Activity," and Platform MCP can read the same summary. (#8314, @danielkov)
• Platform MCP no longer requires a plugin before you can use a server — Once a server you added is ready, you can use it right away from the same connection or get install steps for another app; sharing it with teammates through a plugin is now an optional last step. (#8310, @adaam2)
• Platform MCP shows an inline setup card in ChatGPT and Claude — Adding an MCP server shows the server, its project, and the next step right inside the chat, and connecting a sign-in provider shows one "Sign in to <name>" button. (#8221, @adaam2)
• OpenClaw sets up MCP and hooks from the agent install command — The install command now configures OpenClaw the same way it configures other clients: the agent gateway, the observability plugin with the agent's own key, and conversation access. (#8108, @speakeasyforgebot)
• New hosted MCP servers are usable right away — They now start private instead of disabled, so you can connect credentials and use a server as soon as it's created; only an organization's first server still joins the Default plugin automatically. Platform MCP's set_mcp_address and set_mcp_network_access can now also manage a hosted server's endpoints and network access directly, and preview the exact change before confirming it. (#7968, @speakeasyforgebot; #8022, @daviddanialy)
• Share a captured coding session with a one-read link — Platform MCP's create_session_handoff_link mints a short-lived, burn-after-read link to one of your own captured sessions, after you confirm the exact session and lifetime shown. (#8395, @simplesagar)
• Device agents report whether they're enforcing their served policy — Each active device now carries a policy state of attested, outdated, unreported, or halted, and coverage counts break devices down by that state. An agent's MCP connections also show every way it signs in, including API keys and workload federation, not only MCP sign-ins. (#8116, @bradcypert; #8117, @bradcypert; #8309, @mfbx9da4)
• Security activity gets its own audit log — The audit log shows configuration changes by default and can switch to security activity, such as an agent admitting its own workload identity, with consecutive same-day entries grouped together. (#8238, @aa-wong)
• Each plugin gets a "sync changes automatically" switch — Turn it off in a plugin's Create dialog or Settings tab to hold its changes at the last published version until you click "Sync changes," while every other plugin keeps syncing on its own. (#8150, @speakeasyforgebot)
• Agent setup commands can be run more than once — A setup command now works until its code expires 15 minutes after it was generated, instead of being spent by the first fetch. (#8278, @mfbx9da4)
• Use your own MCP servers through Platform MCP, rolling out behind a flag — list_my_servers, search_my_tools, describe_tools, and execute_tool reach the servers your organization gateway already gives you, with your own upstream sign-ins, with no second connection to set up. (#8271, @adaam2)
• MCP servers and gateways can serve their linked skills directly, rolling out behind a flag — Connected agents can list, verify, and load a server's skills with skills/list, skills/get, and skill:// reads, and each load is recorded as an activation. (#8268, @simplesagar)
• GitHub Actions workload identity, rolling out behind a flag — Where enabled, an agent's credential can be GitHub Actions: name a repository, choose which jobs may sign in as the agent (a whole repository, one branch, or one environment), and the device agent action handles the rest. Everywhere else it's listed under "Coming soon." (#8273, @subomi; #8418, @subomi)

Bug fixes

• Pay-as-you-go checkout works again — Starting pay as you go from the embedded Stripe Checkout form had stopped working; it's fixed. (#8284, @alx-xo)
• A slow gateway member no longer breaks the whole tool listing — Direct tool discovery now returns the full inventory in one response and retries a member that's rate-limited or briefly unreachable within its time budget; a member that still can't answer is left out instead of invalidating the listing. (#8107, @ThomasRooney)
• Removing a server from a plugin now asks for confirmation — Taking an MCP server out of a plugin used to happen immediately; it now confirms the exact project, server, and plugin first. (#8260, @adaam2)
• An unchecked gateway member reads as "not checked," not broken — The gateway now explains that an "unknown" member status means Speakeasy hasn't checked it yet, and points to connection status to check sign-in. (#8350, @mfbx9da4)
• OpenClaw CLI commands no longer hang after installing the plugin — The observability plugin now starts its hooks process on first use instead of when OpenClaw loads, so openclaw plugins install and other commands no longer wait on it. (#8347, @mfbx9da4)
• The agent install hooks self-test no longer leaves a stray session — The self-test used to create an empty "New Chat" session and tool call under every new agent; it now gets answered without being recorded. (#8349, @mfbx9da4)
• Kit assistants on managed GKE start and respond reliably again — Sandbox containers now request enough memory to pass the cluster's admission policy, and the server finds a sandbox's pod even when the cluster doesn't label it with its claim, instead of timing out. (#8421, @danielkov; #8425, @danielkov)
• Slack webhooks reject spoofed verification handshakes — The URL verification handshake is now treated as challenge-only and recognized solely on application/json requests, so a request that skips signature verification can no longer be ingested as a real event. (#7854, @speakeasyforgebot)
• Platform MCP's plugin tool names the server it acts on — distribute_mcp_to_plugin now takes the server's ID, so it acts on and reports the server you meant instead of whatever setup selected last. (#8259, @adaam2)
• Platform MCP sign-in no longer asks you to pick an organization twice — If you already chose an organization while signing in, or belong to only one, Speakeasy now skips the picker and goes straight to the consent page. (#8405, @bflad)
• The agent install command only asks to store the agent key when it's needed — It now prompts to save SPEAKEASY_AGENT_KEY only when it configured Claude Code or Codex, which read the key from the environment; an OpenClaw-only install no longer shows that note. (#8348, @mfbx9da4)