Releases
What's new in AgentOS
What changed in the AgentOS platform and its TypeScript and Python SDKs, newest first. RSS
Upload many files at once, and file them into folders
- Resources takes many files at a time, from the Upload button or by dragging them in, and shows progress as they go.
- Drop files onto a folder to upload them straight into it, or drag a file onto a folder to move it there.
- LinkedIn posts published by agents keep their links and hashtags intact.
A public site for the product
- New pages at /product walk through every capability, backed by a blog of guides and case studies and a Company section with About and Security pages.
- Press / or Ctrl+K anywhere on the site to search docs, guides, product pages and release notes from one place.
- The MCP server has its own docs page, with setup steps for Claude Code, Cursor and Claude Desktop.
- Agents can post images to LinkedIn straight from workspace Resources, and HTML email previews now match the look of the plain-text ones in both themes.
- Alert rules created through the API or an agent now fire reliably, including their webhooks.
- Web requests made by agents now recheck every redirect they follow, not just the first address, closing a gap that could reach internal network addresses.
A new look across the product
- The product shares the website's visual language: clear labels, mono figures and quieter surfaces.
- Approvals read as one request: "Outbound Outreach wants to send 3 emails", the first call previewed, then Approve all, Review one by one or Reject all.
- The run page reads like a record. The transcript is a log with tool calls and their input and output inline, and an agent's markdown renders, tables included.
- Agent pages load faster: model lists and integration schemas are cached instead of fetched on every visit.
Every action shows its progress
- Pausing or activating an agent shows its progress and no longer freezes the page.
- Every button, switch and control that saves something shows that it is working, and you can keep navigating while it does.
- When something goes wrong, the message no longer exposes internal details. It ends with a short reference you can quote to support.
Previews for social posts
- Twitter and LinkedIn posts waiting for approval show the text, visibility, any attached link and the character count against the network's limit.
- Email previews look closer to how a mail client shows them.
- The approvals list stays in place while a decision is in flight, and its buttons show their progress.
See the action before you approve it
- Approvals preview what a call will do: an email with its recipients, subject and body, a file with its contents. Arguments a preview does not show are still listed beneath it.
- Email bodies render in a sandbox, so opening an approval never loads a tracking pixel.
- Every run gets a Summary tab: generate a short account of what happened, plus the list of actions it took, rejected ones marked.
- A paused turn shows all of its calls together, with Approve all and Reject all. Reject the exception on its row, then approve the rest.
Accurate 7-day health cards
- The 7-day run and success cards on Runs are counted live, so they never show stale figures.
- Reasoning models get enough output budget to finish: their maximum completion tokens never drop below 16,384, so long replies are no longer cut off.
Approvals are decided call by call
- When an agent pauses several gated calls in one turn, approving one of them runs only that call. Each call needs its own decision.
- Select or clear every call of a turn at once from its chip.
- A decision stays on screen, with a loading indicator, until it is recorded.
- Conversations, evals and folder changes respect each member's folder access again.
Security fixes for the control plane
- A member's personal key can only reach the agents and folders that member has access to, including when moving an agent between folders.
- Workspace keys can no longer invite or remove members, and control-plane changes are recorded in the audit log like dashboard changes.
- A rate-limited control-plane call answers
429withRetry-After, so clients can back off. - TypeScript SDK 0.4.1 keeps the API key out of logged or serialised runs, tasks and spans. Upgrade, and rotate any key that may have been logged.
The control plane over HTTP
- Every workspace operation the MCP server offers is now also an HTTP endpoint:
POST /api/v1/rpc/<method>, with the same keys, workspace resolution and role checks. - 56 operations across 18 areas: agents, runs, approvals, evals, schedules, resources, alerts, reports, tools and more.
- The TypeScript and Python SDKs expose them as typed methods from version 0.4.0.
- A new control plane reference documents every method.
- Every workspace operation the MCP server offers is now also an HTTP endpoint:
SDK 0.3.0 support, and run cancellation
- The platform side of SDK 0.3.0 for TypeScript and Python: typed
invoke()results, streaming, sessions and retries. See the SDK entries for the full list. - New
POST /api/ingest/v1/run/cancelcancels a run and any human-input request it is waiting on. Calling it twice is safe. - An agent-scoped key can only complete, fail, add tasks to or pause its own agent's runs, never another agent's in the same workspace.
- The SDK documentation pages have their own descriptions and working tracing examples.
- The platform side of SDK 0.3.0 for TypeScript and Python: typed
Resources show when they last changed
- Every resource records when it was last modified, whichever way it was written: dashboard, API, MCP or an agent.
- The resource viewer shows that date, opens as a modal on desktop and no longer overflows its box.
- Help, alert and prompt-variable copy now describes the product as it is, and the user guide has been rewritten.
The Operator can read what it supervises
- The Operator now reads a run's full event timeline, so asking why a run failed gets the actual tool calls and errors, not just the error message.
- It also reads fleet health, the real list of built-in and integration tools, alerts, the approval queue and members. Fleet health is available to MCP clients as the
fleet_healthtool. - Evals run to a verdict in one call: pass, fail, or error with the reason. The Operator can run them to check that a change helped.
- Modals stand out from the page behind them, and Run agent, Run pipeline and the folder picker open as modals.