Follow us on to be up
to date with the latest changes.

Back to AI Control Plane releases

v0.49.0

Platform

// May 8, 2026

Remote MCP source management and observability hook reliability

This release adds the initial UI and APIs for managing custom remote MCP sources, plus reliability fixes for the observability plugin hook flow and Claude Code plugin caching.

Features

  • Remote MCP source management UI and APIs #2608  - Adds the initial Remote MCP source management UI under the
    feature flag, with a Custom remote server entry in the Add Source dropdown, a URL-only create form, and a detail page covering Overview, MCP Servers, and Settings tabs. Also adds
    for probing a candidate remote MCP server URL via an MCP
    request, plus
    and
    filter parameters on
    . Renames the existing Third party server entry to Registry server. (Author: @bflad )

Bug fixes

  • Observability hook event flags and error handling #2682  - Fixes generated observability plugin hooks not firing correctly in production. Hook events now carry explicit
    flags matching the public Gram plugin (
    for blocking events like
    and
    ,
    for fire-and-forget events like
    and
    ). The generated
    script now captures the HTTP response body and status code separately and exits with code 2 on 4xx/5xx so an unreachable Gram server cannot silently bypass blocking policies. (Author: @bradcypert )
  • Claude Code plugin caching across sessions #2697  - Fixes Claude Code plugins not loading after restart. The marketplace URL returned by
    now points directly at the git proxy (
    ) and the install instructions emit
    in the
    snippet, which Claude Code caches reliably between sessions. The URL-based manifest endpoint and its rewrite logic have been removed. (Author: @bradcypert )
  • RBAC dev toolbar environment scope toggle #2684  - Fixes a crash in the RBAC dev toolbar when toggling
    or
    for the first time. Hardens
    and
    to materialize a known-good baseline before spreading, and adds a defensive
    guard at the render site so legacy malformed localStorage state cannot crash either. (Author: @simplesagar )
Sagar Batchu
Sagar Batchu
View on GitHub