NewJuly 2026
Per-connection identity models
Identity model, issuer, and audience are now configured per connection, with strict cross-connection isolation on every tool call.
ImprovedJuly 2026
Developer portal & Connect on-theme
Code samples and tab navigation across the dashboard now follow the LockMCP theme with underline tabs.
NewJune 2026
Role-scoped enum injection
Inject per-role allowed values into tool parameters at list time as defense-in-depth on top of backend RBAC.
ImprovedJune 2026
Row-level security in the data plane
The data plane connects as a non-superuser role with Postgres RLS scoping every query to the active tenant.
FixedJune 2026
SSRF protection on upstream calls
Outbound tool calls now validate targets and block loopback, link-local, and RFC-1918 addresses.
NewMay 2026
Usage-based billing
Flat and usage-block plans with self-serve checkout, in-place plan changes, and invoice history.