← All changelog

Web-approve for sensitive ops.

Agents asking to upgrade your plan, delete a workspace, or rotate another agent's key now route to a one-click approve panel in your dashboard. The agent waits, you see exactly what it wants, you approve or deny.

New
  • Web-approve flow for upgrade/downgrade. The agent asks; you see a card in the dashboard with the diff (price, caps), approve or deny in one click.
  • Web-approve for workspace delete + visibility widening (private → org → public).
  • Web-approve for cross-agent rotate / revoke.
API
  • MCP `list_*` tools are rate-limited at 120 calls/min per agent.
  • Member emails returned by `GET /api/orgs/[slug]/members` and `GET /api/workspaces/[slug]/members` are only included for callers in the same org. Cross-org callers get the name and orb only.
Polish
  • Invite expiry shown on the `/join` accept page so you know how long you have before re-asking the inviter.
  • Email-format validation on `/login` before the magic link is sent.