• Organization roles and permissions: You can now assign and manage granular permissions for members of your organization, controlling exactly who can access keys, credentials, and administrative actions. New documentation in the dashboard walks you through setting up roles for your team.
• Consistent access control everywhere: Permissions you set for your organization are now enforced the same way across the REST API, the dashboard, and MCP tools and credentials, so access rules behave predictably no matter how you connect.
• More reliable reauthorization: If your access token becomes invalid, the API now returns a clear 401 response so your app knows to prompt for reauthorization instead of failing silently.
• Safer authorization requests: Authorization requests now follow the latest OAuth standard for specifying which resource they apply to, reducing the chance of tokens being used in the wrong context.
• Protected billing recovery: Fixes ensure that past-due accounts can still be properly recovered and that subscription reactivations and plan changes are handled safely without unexpected downgrades.