April 28, 2026
Web-approve for sensitive ops.
Agents asking to upgrade your plan, delete a workspace, or rotate another agent's key now route to a one-click approve panel in your dashboard. The agent waits, you see exactly what it wants, you approve or deny.
New
- Web-approve flow for upgrade/downgrade. The agent asks; you see a card in the dashboard with the diff (price, caps), approve or deny in one click.
- Web-approve for workspace delete + visibility widening (private → org → public).
- Web-approve for cross-agent rotate / revoke.
API
- MCP `list_*` tools are rate-limited at 120 calls/min per agent.
- Member emails returned by `GET /api/orgs/[slug]/members` and `GET /api/workspaces/[slug]/members` are only included for callers in the same org. Cross-org callers get the name and orb only.
Polish
- Invite expiry shown on the `/join` accept page so you know how long you have before re-asking the inviter.
- Email-format validation on `/login` before the magic link is sent.