v0.0.23 v0.12.27

high risk

nodejs/nodeSep 5, 2026 → Sep 7, 20262 days between releases

What's New

Major platform shift to MCP suite, Flows API, and security fixes.

Breaking Changes

  • Agent surface returns 404 instead of 403 if AGENT_API_URL is unset
  • Person settings move from workspace files to identity
  • Generate a real INTERNAL_API_SECRET (boot refuses placeholder secrets)

New Features

  • MCP suite with self-describing tools and refusal handling
  • Flows API for event queuing and scheduling
  • Full-text search over meeting transcripts
  • Friction reporting MCP tools

Improvements

  • Gateway strips authority headers by family to reduce exposure
  • Webhook secrets no longer returned on creation to prevent leakage

Bug Fixes

  • Fixed header stripping and webhook secret leakage vulnerabilities

Upgrade Notes

Ensure you generate a real INTERNAL_API_SECRET as placeholders are now rejected. Update your agent configuration to handle 404 responses instead of 403 when AGENT_API_URL is unset. Migrate Person settings from workspace files to identity configuration.

The Two Releases

v0.0.23

v0.0.23 - 2026-09-05

Sep 5, 2026· 2 months ago

A Pydantic Monty release adding new `itertools` adaptors, implementing string formatting support, and enhancing documentation and telemetry bridges.

Full release notes
v0.12.27

v0.12.27 — the full MCP, flows, and searchable meetings

Sep 7, 2026· 1 month ago

This release introduces a comprehensive MCP suite allowing agents to perform all Vexa tasks, a new 'Flows' API for Python-based workflow automation, and searchable meetings. It also includes critical security fixes regarding header stripping and webhook secrets.

Full release notes