Automatic offboarding via SCIM and MCP client identity logged in function backed tools
Offboarding just got safer: when your identity provider deactivates a user, the platform now revokes their organization access and role assignments immediately — no manual cleanup, no lingering sessions. Function-based tools can also see which MCP client is calling them, unlocking per-client logging and observability, and the Plugins page now shows how many active skills each plugin carries.
Features
Automatic deprovisioning on SCIM deactivation#4283 - When a user is deactivated in your identity provider, their organization membership and role assignments are revoked and their cached session info is invalidated right away. Membership syncs only import active users, and deactivated users no longer reappear in organization rosters. (Author: @claude)
See which MCP client is calling your tools#4234 - Function-based tools now receive the calling MCP client's name and version through ctx.clientInfo, so you can tailor logging and observability by client. The value is self-reported metadata from the client — use it for insight, not authorization. (Author: @kevinkruger)
Skill counts on plugin cards#4326 - Each plugin on the Plugins page now shows the number of active skills it carries, so you can see what a plugin distributes without opening its detail page. (Author: @danielkov)