GitHub Copilot joins observability, billing lands on one page, and gateway endpoints start rolling out

If your organization uses GitHub Copilot, its sessions now show up in the same timelines, spend gates, and policy checks as the other four platforms. Billing consolidates into one usage view for every plan, with promotion codes accepted at checkout, and cost analytics now report the tokens people actually used. Captured sessions can be recalled from inside any connected agent, and gateway endpoints, one MCP endpoint fronting a curated set of servers, begin rolling out behind a flag.

Features

• GitHub Copilot becomes the fifth observability platform #5376 - Copilot hook events land on the same ingest path as the other platforms, so Copilot sessions appear in the same timelines, spend gates, and policy checks. The dashboard offers a downloadable Copilot plugin package with a hooks-scoped key already embedded. Hooks fire in Copilot CLI only; MCP servers and skills from the same plugin load in VS Code and the Copilot app, but those surfaces report no telemetry. (Author: @svadrutk)
• One billing page for every plan #5827 - Pay-as-you-go organizations get the same token usage view as enterprise, with the invoice estimate at its head and an explicit empty state before any usage is recorded. Checkout now accepts Stripe promotion codes (#5722). (Author: @danielkov)
• Cost analytics report what people actually used #5824 - Token numbers on the costs page and project overview now show plain LLM tokens (input plus output), matching the employee pages, with cache-creation tokens visible as their own labeled metric. Employee views fold a person's full identity, including linked personal-account emails, so their usage no longer splits into an unattributed duplicate row (#5780). (Author: @daviddanialy)
• See how each connected agent authenticates #5736 - The MCP connections list now derives each registration's credential kind server-side and badges the two worth interrupting a scan for: key-authenticated and cannot-authenticate. The registration detail sheet states the kind for every client and is reachable again from the agent row's menu. (Author: @bflad)
• Client admission defaults to an honest open mode #5807 - Issuers that never configured client admission now rest at an explicit open policy instead of an internal mode nothing displayed, so enforcement becomes something an operator opts into rather than a default anyone lands on. No client that authenticates today stops authenticating, and catalog-gap measurement survives the change. (Author: @bflad)
• Recall a captured session from any connected agent #5719 - Two new Platform MCP tools bring session recall without the device agent: list your own captured coding-agent sessions and continue one as a redacted handoff digest inside the current conversation, with each recall audit-logged and linked by lineage. (Author: @simplesagar)
• Antigravity joins the install options #5732 - The hosted MCP install page replaces Gemini CLI with Antigravity CLI and adds Antigravity IDE, both using Antigravity's mcp_config.json format. (Author: @speakeasyforgebot)
• Platform MCP installs from a public marketplace #5801 - The first-party Platform MCP package now publishes from a public plugin marketplace instead of being injected into each organization's private plugin repository, so installs become the same two commands for everyone and OpenCode gains an install route it never had. Access still fails closed on the same entitlement. The connect flow adds a catch-all "Other agent" option for agents outside the certified set (#5795). (Author: @adaam2)
• Gateway endpoints, rolling out behind a flag #5664 - Behind the gram-gateway-endpoints rollout flag, a gateway is one MCP endpoint fronting a curated, ordered set of MCP servers, managed from the dashboard with Overview, Members, Inspect, Clients and Sessions, and Settings pages. The Inspect tab reads the endpoint live over MCP and shows exactly what a client receives. This release adds drill-down into hosted members (#5604), dispatch to remote and tunneled members with per-member credential routing (#5781), default auth wiring on creation (#5853), and sessions that degrade per member instead of rejecting outright when a provider is unconnected (#5882), on the control plane and protocol groundwork from 1.17.0. (Author: @daviddanialy)
• Manage signing keys from the dashboard #5679 - For organizations with the customer-managed encryption keys entitlement, a new Signing Keys section on the Encryption Keys page creates JSON Web Key Sets from a GCP KMS key and manages the publish, activate, retire, and revoke lifecycle of their published keys, on the management API introduced in 1.17.0. (Author: @bflad)
• Resolve one person across every subsystem #5793 - The new identity.resolve endpoint takes an identity URN in any form the platform stores activity under, such as a user ID, email, API key, or agent-reported external ID, and returns every identifier for the same subject plus their directory attributes, so any surface can link with whichever identifier it holds. (Author: @adaam2)
• Platform operators only #5731 - Visible to platform operators, not customer organizations. The admin dashboard gains an organization Activity view over cursor-loaded audit history (#5730), live and completed trial details on the organization overview (#5714, #5713, #5715) with legacy trial fields removed (#5716), a customers-only stat strip (#5650), an S-token calculator page (#5668), and audit rows that keep the staff name privately while customers see Speakeasy Team (#5728). (Author: @walker-tx)

Bug fixes

• Assistants see their directly attached servers #5830 - Assistant surfaces now count MCP servers attached directly to the assistant, not only those reached through a toolset, and the composer's @-picker explains an empty Tools section instead of hiding it. (Author: @alx-xo)
• The Skills list loads its insights faster #5791 - Activation, efficacy, and savings metrics now load without computing unused cost and regression signals. (Author: @tgmendes)
• Transcripts hide OpenClaw's message envelope #5822 - Session transcripts, titles, and summaries no longer render OpenClaw's inbound metadata framing; stored messages are unchanged. (Author: @bradcypert)
• Small fixes across the dashboard #5790 - The browser tab icon follows the browser's own light/dark setting so it no longer disappears (@adaam2). The login page links to sign-up (#5616, @alx-xo). Deleting a project returns you to the organization home instead of the deleted project's settings (#5841, @alx-xo). (Author: @adaam2)
• Internal #5765 - Groundwork with no customer-visible surface: MCP servers record and index their upstream authorization server (@daviddanialy); new metrics count upstream session refreshes and rejected MCP requests (#5681, @bflad). (Author: @daviddanialy)