See which skills actually save money, explore costs on a stacked timeline, and monitor every AI integration sync
Skills now prove their worth with efficacy scores, attributed session cost, and estimated savings per skill. The costs explorer is rebuilt around a stacked cost-over-time chart with drag-to-drill date ranges, and the AI Integrations page shows every provider sync stream with live status, inline errors, retry, and pause controls. OpenAI Codex joins the supported agent platforms, and skills gain public share links.
Features
Skill efficacy insights#4458 - Each skill now reports efficacy, activation counts, attributed session cost, estimated savings, trends, and scored-session drill-downs, so you can see which skills actually improve your agents' work — with organization-wide sampling controls to tune how sessions are scored (#4453). (Author: @danielkov)
Costs explorer rebuilt around a stacked cost-over-time chart#4413 - Daily spend stacks by your current breakdown axis, with weekly and monthly bars for period-over-period comparison and click-or-drag drill-down into any date range. Search, breakdown controls, CSV export, and the date picker form one control bar that pins to the top as you scroll, and re-pivoting updates in place instead of flashing back to skeletons. (Author: @daviddanialy)
Per-stream status, retry, and pause for AI integrations#4440 - The AI Integrations section moves to a dedicated page with one expandable row per provider connection, showing each event and metric stream's live status, last error, and timestamps — with inline retry, an independent pause toggle, and automatic pausing of schedules the provider keeps rejecting. (Author: @subomi)
Share skills with a public link#4394 - Mint an unguessable share link for any skill to give people outside the project a read-only view of its name, summary, and latest content. Revoke the link at any time, and archiving a skill revokes it automatically. (Author: @simplesagar)
OpenAI Codex is now a supported agent platform#4416 - Onboarding now walks through instrumenting both the Codex CLI and the Codex desktop app — deploying the device agent via MDM and forwarding Codex OpenTelemetry logs — and Codex compliance cost polling brings its spend into your cost views (#4407). (Author: @mfbx9da4)
Guided Shadow MCP policy setup#4274 - Set up a Shadow MCP policy in one atomic flow: pick URLs from your project inventory, review them in a searchable modal, and have allow rules reconciled automatically. The Shadow MCP detector is now mutually exclusive with other built-in detectors, with tooltips explaining how to change the selection (#4483). (Author: @alx-xo)
Secret scanning catches full AWS credentials#4493 - Scanning now flags AWS secret access keys and session tokens, not just the access key id — and the access key id is treated as a detection anchor rather than a reported secret, so findings mask the actual secret while keeping the identifier visible (#4504). (Author: @vishalg0wda)
Charts and generative UI in assistant replies#4462 - Project assistants in the dashboard can now answer with Elements chart and generative UI blocks, so questions about usage or spend come back as visuals instead of walls of text. (Author: @alx-xo)
Bring your own signing keys#3956 - A new organization-scoped external keys API manages the AWS and GCP KMS keys the platform signs with, each backed by an external credential, with full audit coverage. (Author: @bflad)
Merge duplicate identity providers without re-authentication#4087 - When two remote identity providers point at the same upstream authorization server, a new migrate flow re-points the source's clients onto the target and retires the source — and nobody has to log in again. (Author: @bflad)
MCP & Tools dashboard streams in panel by panel#4473 - Each card on the MCP & Tools page now loads independently as its data arrives instead of blocking on the slowest aggregate, and the underlying queries prune their scans to the selected window instead of 90 days of history. (Author: @daviddanialy)
Skill summaries stay in sync and distribution blockers are explained#4454 - Publishing a new skill version updates the registry summary automatically, the Add Skills dialog becomes a multi-select that batches distributions, and skills that can't be distributed show the reason with a Fix link. (Author: @danielkov)
Faster risk policy lists#4363 - Listing risk policies no longer re-aggregates every risk result in the project on each call, so the policies page loads quickly even with large analysis histories. (Author: @dennnis-ez)
End-to-end hook performance tracing#4331 - Hook traces now begin on the device and carry operating system, architecture, and on-device elapsed time, so hook performance can be measured end to end and issues diagnosed per platform. (Author: @danielkov)
Bug fixes
Claude Desktop sessions show the user's name#4437 - Compliance imports no longer overwrite a resolved session owner when a later sync carries no actor identity, email matching is now case-insensitive, and sessions that still can't be matched explain why in a tooltip. (Author: @bradcypert)
Proxied MCP tool calls no longer rejected on missing internal metadata#4425 - The remote MCP proxy stops injecting an internal x-gram-toolset-id property into tool schemas, so calls to remote and tunneled MCP servers succeed even when the model omits the value or invents its own. (Author: @bflad)
Faster hook responses on large MCP inventories#4422 - The shadow MCP inventory capture no longer runs on the synchronous hook request path, where it could hold hook responses for seconds; enforcement behavior is unchanged. (Author: @bradcypert)
Prompt-injection detection copy matches reality#4467 - Dashboard copy and assistant instructions now describe the LLM judge, which has been the only prompt-injection engine since the retired ML classifier was dropped. (Author: @vishalg0wda)
