| Month | Releases | Days with a release |
|---|---|---|
| May 2026 | 31 | 7 |
| Jun 2026 | 165 | 22 |
| Jul 2026 | 214 | 24 |
| Aug 2026 | 120 | 27 |
| Sep 2026 | 12 | 10 |
| Oct 2026 | 13 | 9 |
| Nov 2026 | 13 | 8 |
Changelog
Every product update in plain words: what changed, what it gives you, and what to switch on.
Highlights
You can now create an agent from a conversation and have it run tasks in the background while you continue chatting. You will receive updates on its progress and can stop individual tasks at any time.
Read more →
Talk to an agent out loud with Call on its card or by dialling a number. It answers in Czech or English, says it is an AI, and the transcript lands privately in your chat list. One switchboard number reaches every agent by extension, and an owner can require a personal phone PIN.
Read more →
Access requests, mentions, shares, answers to your watches, schedule failures, support replies and more now land in Notifications. Needs you lists what waits for your reaction, and the bell counts only that; admins also see waiting work there.
Read more →
Turn a report or dashboard from chat, the Library, the CLI or an agent into a page at a stable link, with versions, comments, Reader, Commenter and Editor roles for groups or named people, watches and optional password-protected public links.
Read more →
Facts about clients, people and engagements that a document-processing job delivers are stored with their source, a verbatim quote and a date. Search them on the collection page, from the command line or through agents; conflicting values appear side by side.
Read more →
People an agent is shared with can now chat with it and call it, not only view it. The agent works with its owner's access, limited to what the owner attached, while row-level table policies filter rows for the person calling. Only the owner can change it.
Read more →
A Files button in the conversation header lists the Word documents, decks and spreadsheets the chat produced, with Download and Save to Library. Since 28 Aug each new file also appears as a chip under the answer that made it.
Read more →
An agent can hold up to 20 schedules: every few minutes or hours, daily at set times, or a cron expression. From 19 August the agent builder has a Schedules section with on/off switches, last run and an option to start from a skill.
Read more →
An admin can attach one SQL rule to a table kept on the server, filtering rows and masking columns by who is asking. It applies to queries, previews, snapshots, schema and connected AI tools, and every filtered answer says it was filtered.
Read more →Latest update 9 Nov 2026RSS feed
145 items shown
Daily update
You can now have an agent run tasks in the background while you chat and see which pages link to your documents. Administrators can also enable Microsoft Teams integration and a central space for company knowledge.
25 new
Read the full updateDaily update
You can now view interactive charts in chat and search your entire knowledge map. Administrators can also enable new ways to create and edit workflows, along with tools for the web editor assistant.
19 new · 4 changed
Read the full updateDaily update
You can now ask questions directly in the document editor, search your past conversations, and open a floating chat window over any page. Administrators can also turn on features like meeting briefs and interactive knowledge maps.
16 new · 2 changed
Read the full updateDaily update
Searching a collection now reliably returns documents that contain the exact term you typed. Documents with exact matches will no longer be pushed down the list by results with similar meanings.
1 fixed
Read the full updateDaily update
You can now talk to your agents on a dedicated iPhone app and receive push notifications. Agents set to automatic memory can save lessons right away, and the Mac app adds a built-in inbox.
23 new
Read the full updateDaily update
You can now browse a dedicated metrics catalog and connect voice calls directly to your open chats. Other updates include private memory for shared agents, automated memory maintenance, and action policies that restrict what your agents are allowed to do.
16 new · 4 changed
Read the full updateAgents that can pay
An agent's owner can let named people and groups spend from the owner's budget for that agent. The owner's allowance pays and counts everyone's purchases; spenders see a Paid from line and only their own purchases, never the balance. A person's own budget is always used first.
Requires: Agent Wallet, which an admin turns on and funds (Postgres app-state).
Agents that work for you
A Slack message that arrived just after Agnes restarted could be routed to a conversation nobody was reading and stay unanswered without any notice. Agnes now releases those conversations when it shuts down, so the next message is answered.
Requires: The Agnes Slack app installed by an admin.
Company knowledge
A collection file that was later rejected, sent for review or left waiting for image transcription kept answering searches and agents from its earlier text. That text is now removed from search as soon as the file's status changes.
Governance, privacy and cost
Commands and tools an agent runs in an admin's chat now carry no admin authority, so it cannot act on other people's data apps or reports on the admin's behalf. Admin lists stay readable from chat; administrative work belongs in the web admin pages or a terminal outside the chat.
Requires: Web chat, which an admin turns on.
Agents that work for you
A queued or running agent run has Cancel run on the Agents page, and can also be stopped from the command line. It reports whether the run stopped or a stop was only requested and is still being confirmed. Purchases are refused from the moment of the request, and it lists what the run already bought.
Requires: Run cancellation, which an admin turns on; Postgres app-state. Only the person who started the run, the owner for runs under their own permissions, or an admin can stop it.
Agents that work for you
Talk to an agent out loud with Call on its card or by dialling a number. It answers in Czech or English, says it is an AI, and the transcript lands privately in your chat list. One switchboard number reaches every agent by extension, and an owner can require a personal phone PIN.
Requires: Agent calls, which an admin turns on, plus a voice provider key; Postgres app-state. The owner turns calls on for each agent. Phone calls also need telephony credentials and are accepted only from a number the caller verified in their profile. No data tools during a call yet.
Read more →Company data and access
An admin can set a BigQuery connection or table to passthrough, so reads run as the asking person and BigQuery's own permissions and masking apply. Chats that read such data become private; reads in shared conversations, someone else's shared agent or Slack channel threads are refused.
Requires: Postgres app-state. People connect their Google account on My connections; operators register the sign-in callback and grant each person BigQuery job access on the billing project.
Action needed: Analysts: agnes pull deletes local copies and snapshots of passthrough tables, and moves snapshots it cannot attribute to a quarantine folder. Move one back to keep it.
Company knowledge
Turning on the rebuilt company memory stops the old memory's collection and mining. The new store fills only through reviewed proposals: the automatic import from the old memory is gone, and imported items nobody revised were deleted. Nothing is delivered to agents from the new store yet.
Requires: The rebuilt company memory, which an admin turns on; session analysis on; Postgres app-state.
Action needed: Admins: before turning it on, plan for agents losing the old memory pipeline's new knowledge until the rebuilt store starts delivering. Turning it off resumes the old pipeline.
Company data and access
Some data packages shared with a group looked available but never reached its members, whose queries failed with 'not in your stack'. Those shares now work, and new shares are available to members by default.
Requires: Instances on Postgres app-state were affected.
Agents that work for you
An agent's owner can have the agent follow the latest version of an artifact instead of typed instructions, in chat and in calls. The artifact's Editors are listed as the people who can change the agent's behaviour, and an artifact that becomes unreadable stops the agent instead of falling back.
Requires: Agent calls and Artifacts, which an admin turns on; Postgres app-state. The owner and each caller must be able to read the artifact. Set up through the API or command line.
Company data and access
Tickets closed shortly before Agnes fetched them kept a running resolution SLA forever. Agnes now revisits recently closed tickets until the completed SLA is stored, so SLA reports count them correctly.
Requires: An admin connects Jira.
Skills and plugins
Admins pick a tool server such as GitHub, Slack, Linear or HubSpot from a catalog of about 75 (MCP servers), choose its tools and the groups that may use it. Once enabled for groups, people see it in My connections and its tools appear when they connect.
Requires: Enabling a server for groups needs Postgres app-state.
Read more →Across Agnes
On phones the chat no longer hides the answer behind the header or keyboard, wide tables scroll, tapping a field no longer zooms the page, and data package tables show as cards.
Across Agnes
New chat, Search, Artifacts, Agents and Library sit at the top, followed by one Chats list, and Admin is a mode with its own sections. Search, or Ctrl+K, finds pages, conversations, artifacts, agents, tables, metrics and documents.
Across Agnes
Access requests, mentions, shares, answers to your watches, schedule failures, support replies and more now land in Notifications. Needs you lists what waits for your reaction, and the bell counts only that; admins also see waiting work there.
Requires: Postgres app-state; on other instances Notifications is hidden.
Read more →Governance, privacy and cost
When a person's own credential for a per-user connection could not be read, the call used to go out under the shared service account. It now fails instead, so nobody acts with rights or an audit trail that are not their own.
Governance, privacy and cost
Token, cookie, API key and signature header values no longer show in clear text in chat tool cards, approval cards or copied transcripts. This changes only what is displayed: stored content and what the agent sees are unchanged. Copy transcript now includes each tool step's result.
Requires: Web chat, which an admin turns on.
Company data and access
Server-side queries and artifact live data now decide access from a full parse of the statement before anything runs. PIVOT/UNPIVOT, file paths, functions off an allowlist and very long statements are refused, and a missing table looks the same as one outside your stack.
Action needed: Rewrite saved queries or artifact live-data queries that use PIVOT/UNPIVOT (use CASE WHEN with GROUP BY) or DuckDB functions such as version().
Publish and collaborate
Someone who follows an artifact link without access can send the owner a short request. The owner is notified and approves or declines it from the artifact page, the CLI or an agent.
Requires: Artifacts, which an admin turns on (Postgres app-state).
Agents that work for you
Files an agent run produced can be listed and downloaded through the API and desktop tools. Since 7 Oct this also works for quick answers, a large file comes as a signed, expiring link, and an answer or Slack reply lists only deliverables; the full file list stays available on request.
Requires: Signed links need the instance's public URL to be set.
Agents that work for you
Owners share an agent with their groups from the Agents page, and an admin approves each new group after seeing what it would get. The agent answers with the owner's access, limited to what they attached. Since 8 Oct recipients find it under Shared with you, and the owner picks whose sign-in each connection uses.
Requires: Postgres app-state. For a connection where each person signs in, the default is the person's own sign-in; the owner can choose My account or Nobody else instead.
Agents that can pay
Give an agent a Spending Mandate, a task and a dollar budget, and it finds pay-per-call services in a catalog and pays from one company wallet in USDC, on a test network or with real money. Finance sets each person's allowance.
Requires: Agent Wallet, which an admin turns on and funds (Postgres app-state).
Read more →Governance, privacy and cost
Uploaded Claude Code sessions were counted up to about 1.8 times too high, inflating token and cost figures. Usage is now counted once per message.
Publish and collaborate
An Editor can let a document's own form send answers, turning a published page into a survey or feedback form. The reader confirms the exact text before it is sent, and each answer is saved as a comment the author can list and read.
Requires: Artifacts, which an admin turns on (Postgres app-state).
Chat with Agnes
The chat can propose a note to remember. By default proposed notes wait for your approval: you save, edit or dismiss them, and saved notes carry into later conversations. An admin can let notes save automatically instead. Since 8 Oct a page lists everything Agnes remembers about you.
Requires: Web chat on the built-in engine and chat memory, both of which an admin turns on; Postgres app-state.
Connect your own tools
A CLI older than 1.0 could not upgrade itself. The server now refuses it with a message naming the one-line reinstall, after which upgrades are automatic again.
Action needed: If agnes commands answer 'Upgrade Required', reinstall the CLI with the command in the message.
Connect your own tools
agnes onboard --client codex sets Codex up with your skills, Agnes data tools and workspace instructions, and agnes push uploads Codex sessions next to Claude Code's.
Requires: After setup, restart Codex and review the Agnes hooks once with /hooks.
Read more →Governance, privacy and cost
Permanently deleting a chat used to leave a full copy readable by admins, and purging an account left uploaded transcripts. Both are now deleted; cost totals stay without the person.
Publish and collaborate
Publishing a new version without naming a design system used to remove the artifact's styling. A new version now inherits the design system of the version it was based on.
Requires: Artifacts, which an admin turns on (Postgres app-state).
Action needed: To remove a design system, say so explicitly: --no-design-system in the CLI, or clear it in the API or tool call. Leaving it out no longer removes it.
Publish and collaborate
A gallery of document types, such as data reports, strategy briefs and runbooks, tells the assistant how a document is structured, with examples. Writing styles set the voice, a check flags long sentences and words to avoid, and teams can publish their own types and styles.
Requires: Artifacts, which an admin turns on (Postgres app-state).
Agents that can pay
The Wallet page gives finance an overview, purchases, reconciliation with the blockchain, allowances, mandates, merchants and notices, with CSV export and a freeze switch. A Finance Reader role can read and export without controls.
Requires: Agent Wallet, which an admin turns on and funds (Postgres app-state).
Skills and plugins
A connected MCP system whose address points at a cloud metadata address, a private literal IP over plain HTTP or another unsafe target is now refused at every call, by default.
Action needed: Admins check that registered MCP sources use an allowed https address.
Governance, privacy and cost
An admin can connect Okta as a group source: each person's Okta groups are mirrored every 15 minutes as groups that can receive grants. Since 8 October Okta is also a ready-made sign-in option in Server configuration.
Requires: An admin connects Okta.
Governance, privacy and cost
Every workspace has an explicit setting, shared by Claude Code and Codex, for whether session content is uploaded. Upload is on by default, also for older workspaces when they update. Automatic uploads now run at session end, and an admin can make transcripts expire.
Requires: Transcripts are kept forever unless an admin sets a retention period. A manual agnes push still uploads at any time.
Across Agnes
The web app now uses your operating system's light or dark appearance until you pick a theme in the account menu. Before, it stayed light on a dark-mode computer unless you chose System yourself.
Requires: An instance whose admin set a dark theme stays dark.
Agents that work for you
An agent's owner can store a credential for a connected system or GitHub, so the agent calls it under its own account, not yours. Agents can clone and push allowed repositories; the token never enters the sandbox.
Publish and collaborate
Turn a report or dashboard from chat, the Library, the CLI or an agent into a page at a stable link, with versions, comments, Reader, Commenter and Editor roles for groups or named people, watches and optional password-protected public links.
Requires: Artifacts, which an admin turns on (Postgres app-state).
Read more →Publish and collaborate
Ask Agnes opens the chat with the document docked beside it; you can point at a passage or a chart and ask about it. Any chat can also attach an artifact you can read, and every write asks for approval.
Requires: Artifacts and web chat, which an admin turns on; the Editor allows it per artifact.
Connect your own tools
Deprecated command spellings such as 'agnes connectors' or 'agnes admin usage' now fail with 'No such command'; use the current names. The host-only 'agnes server' command was removed.
Action needed: Update scripts that call old command names (for example agnes tools instead of agnes connectors).
Metrics and business definitions
Questions about 'this year' or 'YTD' are bounded to today unless a metric or the question says otherwise, and the assumption is stated. Some imported Keboola metrics returned SQL that failed; it now runs.
Data apps
Creating, pushing, deploying a hosted data app or changing its data identity now needs the data app authoring capability an admin grants. Hosted apps reach the outside world only over HTTP and HTTPS.
Requires: Hosted data apps, which an admin turns on.
Action needed: Admins grant the authoring capability on the Access page to people who build apps; apps using raw database or SMTP connections must switch to HTTP APIs.
Company knowledge
Entities in the document graph are now called nodes. Settings, commands, agent tools and API paths moved from facts to graph names; the old names keep working for one release, with a startup warning naming each setting to rename.
Requires: The document graph, which an admin turns on.
Action needed: Rename facts.enabled and facts.visibility_mode to graph.enabled and graph.visibility_mode, and update scripts that call agnes facts, before the next release removes the old names.
Governance, privacy and cost
Group membership used to refresh only at Google sign-in, so removed people could keep access for up to 30 days. Now a person's activity triggers a background refresh once their groups are older than 15 minutes; the next request uses it, and a failed refresh keeps the old groups.
Requires: Google sign-in and Postgres app-state.
Company data and access
Each Keboola table now has a Refresh choice: when the data changes, on a schedule, or manually. New tables default to refreshing only on change. The instance-wide skip-unchanged setting from 1.3 is gone.
Action needed: Admins who used the instance-wide skip-unchanged setting switch those tables to 'When the data changes'.
Publish and collaborate
A published page can run read-only queries against the catalog and refresh its charts. Choose the same data for everyone, or let each reader see only their own rows; the per-reader mode needs an approved author and passes a security check.
Requires: Artifacts, which an admin turns on (Postgres app-state).
Read more →Publish and collaborate
Readers can present an artifact full screen from the reader menu or a #present link; slides come from the author's slide marks, rules or headings. Authors can hide the option or open the link straight into the presentation.
Requires: Artifacts, which an admin turns on (Postgres app-state).
Governance, privacy and cost
The Report a problem entry and its issue pages are now hidden until an admin turns on issue reporting for the instance. Reports already filed are unaffected.
Action needed: Admins who want people to report problems turn on issue reports in the server configuration.
Agents that work for you
A Schedules tab on Agents lists every schedule you own with its next run and last result. Edit a schedule, use Run now to test it, and get a badge and a notification when a run fails or needs you.
Governance, privacy and cost
New personal and service-account tokens can no longer be created without an expiry or for longer than 365 days. Tokens already issued without an expiry keep working until revoked.
Action needed: Owners of never-expiring tokens should rotate them.
Agents that work for you
An agent's owner can cap turns, tool time and spend per run, which Agnes enforces before the next model call, and pre-approve specific tools for runs nobody watches. Admins set the ceilings, and every use is audited.
Across Agnes
Every instance ships a searchable user guide at Documentation that matches its version, and a What's new page listing the changes in the build you run. The chat agent answers how-to questions from the guide.
Agents that work for you
An agent's owner creates a trigger and points a system such as GitHub or Linear at it. A signed delivery that matches the event filter starts one unattended run; duplicates and deliveries over the hourly limit do not. Since 8 Oct a trigger can also require conditions on the delivery's content.
Requires: Inbound agent triggers, which an admin turns on; Postgres app-state and the instance's secrets vault.
Read more →Company data and access
Scheduled syncs skip tables that did not change upstream, so a short schedule costs a quick check instead of a download and tables are fresh soon after they load. The sync page shows refreshed, unchanged and failed counts. Live Keboola tables on named connections now work.
Metrics and business definitions
Agents get tools to list and open registered metrics, including their SQL, so they can look up the agreed calculation, even where no command line is available.
Read more →Chat with Agnes
When an agent proposes a plan, the approval card shows the full plan with Approve plan and Deny, in web chat, Slack, the terminal and the agent API. A plan is never approved on its own.
Connect your own tools
agnes library lists, shows, adds, removes and uploads the same items the web Library shows, with the same access explanations. Agents get matching tools.
Company data and access
A table protected by a row or column policy is no longer silently skipped by agnes pull: it downloads the part you may see, within a size cap, and names the table when the cap is hit. Since 23 Sep snapshots of such tables expire after 4 hours by default.
Requires: Row and column policies, which an admin turns on.
Chat with Agnes
agnes chat can list your conversations, resume one with its recent messages, pin, rename, archive or delete it, download its files and print the full transcript. Approvals and questions are answered inline.
Requires: Web chat, which an admin turns on.
Governance, privacy and cost
A new Agents page for admins lists every agent with its owner, reach, groups and live tokens, and flags agents whose owner has left. Admins can revoke an agent's tokens or delete it; an agent whose owner was deactivated stops answering.
Agents that work for you
Each run, whether scheduled, called by a program or started by you, is kept with its outcome, tokens and cost. One list shows runs across your agents that failed or asked you something, and chat turns appear in the history too.
Requires: Postgres app-state.
Governance, privacy and cost
Agnes records each AI call it makes, from chat to document processing, with its price where one is known. Admin dashboards show cost by task, agent, person and model. Since 18 Sep the owner of a conversation can see roughly what it cost.
Requires: Postgres app-state. Calls without a known price are not included in the totals.
Read more →Chat with Agnes
Every finished answer has thumbs up and down with an optional comment. Admins read the feedback in one queue, and a rating feeds session analysis as the strongest signal of success.
Requires: Web chat, which an admin turns on.
Data apps
A form or survey app saves rows to its own tables, each stamped with who sent it. The owner and admins query them like any other table; wider sharing goes through data packages.
Requires: Hosted data apps, which an admin turns on; Postgres app-state.
Chat with Agnes
A conversation open in a second tab could disappear from your history for good; it no longer does. Invited colleagues can open shared conversations, messages are not shown twice, and a server restart no longer cuts off a running answer silently.
Requires: Web chat, which an admin turns on.
Connect your own tools
agnes init now allows only agnes commands and read-only tools without asking; other shell commands follow your own Claude Code permission mode. Existing workspaces are unchanged.
Company data and access
agnes admin connection add now creates connections of every source type and lists what each type needs. The --token option is removed because a secret on the command line is visible to other processes.
Action needed: Replace --token in admin scripts with --token-env, --token-file, or agnes admin connection secret.
Governance, privacy and cost
Admins can pull complete conversations, with tool calls and feedback, or push them on a schedule to an evaluation system. Prompts and answers leave the instance only under a recorded content-export policy naming the legal basis and approver.
Requires: Postgres app-state and a recorded content-export policy.
Company knowledge
Natural-language document search used to need every word in one passage and often returned nothing. It now ranks partial matches, is much faster, and can be narrowed to one folder.
Data apps
A BI report, dashboard or existing internal tool can be added as a linked app with a description, a link and the usual sharing. Agnes hosts nothing for it.
Requires: Hosted data apps, which an admin turns on.
Connect your own tools
The documentation tool and the semantic model tool return one page at a time with a pointer to the next, so long documents no longer overflow. Custom integrations that expected the whole text at once must follow the pages.
Action needed: Integrations calling documentation_api or semantic_model_get must read content and follow next_offset.
Company knowledge
Knowledge items marked required reached only laptop sessions, never the web chat. Both chat engines now load them, and a revoked item stops being delivered.
Requires: Web chat, which an admin turns on.
Governance, privacy and cost
Report a problem from the menu: Agnes attaches the page, version, browser and recent errors, plus an optional screenshot. Follow replies and send files in My reports; reports can also flow to your own support desk and back.
Requires: Issue reports, which an admin turns on (off by default since 1 October); Postgres app-state.
Skills and plugins
A rejected version, the review queue's Delete button or the nightly cleanup could remove a published skill with all its installs. Now only the rejected version is removed.
Governance, privacy and cost
Session analysis sorts conversations from web chat, Slack, Telegram, agents and analyst sessions by task, outcome and failure. The extracted summaries leave out personal data; the conversations behind them do not, and admins can open them. Since 23 Sep an option groups conversations into topics.
Requires: Session analysis, which an admin turns on; one AI call per conversation; Postgres app-state. Topic grouping is a separate switch and needs the image with embedding models.
Connect your own tools
New users pick their agent (Claude Code, Codex, Cursor, Gemini CLI and others) and a folder, then paste a two-line prompt with a one-time setup code. The page notices when setup finishes. Chat-only apps get the connector instead.
Company data and access
Snowflake is phasing out password-only sign-in for service users, so a new connection now defaults to a key pair. Existing password connections keep working unchanged, and each connection keeps its own key and passphrase.
Chat with Agnes
Each conversation in the list shows whether it is answering, waiting for your approval or answer, finished while you were away, or failed. Opt in to browser notifications to be told when one needs you or finishes.
Requires: Web chat, which an admin turns on.
Data apps
Apps receive the viewer's identity to personalize pages. An owner can switch an app to viewer mode, where each person sees at most what both they and the owner may see.
Requires: Hosted data apps, which an admin turns on; viewer mode needs Postgres app-state.
Company data and access
agnes snapshot and the automatic snapshot fallback of agnes query failed on every Windows machine. They now run there too.
Governance, privacy and cost
Admins and owners can give something to Everyone: every account, including people in no group and anyone who joins later. Where Everyone used to mirror a directory group, that group keeps its members and access under its own name.
Company data and access
Large tables exported in slices from projects on AWS or Azure download again, syncing one table no longer removes others, large exports keep their first row, and a mistyped filter no longer exports the whole table.
Skills and plugins
The Marketplaces page only turns a plugin Off or Available. Who receives it, including everyone automatically, is set on the Access page like any other grant. Existing system plugins were converted without changing who gets them.
Action needed: Scripts that call the plugin system endpoints must create an Everyone grant instead; those endpoints are removed.
Governance, privacy and cost
Policies can show only part of a value or a keyed pseudonym and give each group its own view of a column. Admins preview rows per group and restore earlier versions, policies now run inside Snowflake too, and filtered results say so.
Requires: Row and column policies, which an admin turns on.
Governance, privacy and cost
We closed several gaps where a table's row and column rules could be avoided. The rules now apply consistently, including to data apps owned by an admin, which now see their owner's filtered view.
Requires: Row and column policies, which an admin turns on.
Action needed: Check data apps owned by an admin: they may now show fewer rows than before.
Governance, privacy and cost
Admins create service accounts on the Users page: identities for scripts and integrations with their own groups and revocable tokens. They can never sign in interactively or become admins.
Requires: Postgres app-state.
Governance, privacy and cost
Phone numbers, IBANs, Czech birth numbers and your own terms are now redacted, and an admin can paste a sample to see the result. An optional AI reader, also self-hosted, finds names; file names and folder paths are redacted too.
Requires: SharePoint with anonymization, which an admin turns on.
Company knowledge
Each newly added document is read once by an AI model and turned into facts with verbatim, checked quotes. Since 4 Sep extraction can also run while a SharePoint crawl is still going, on Google Vertex AI or as a cheaper batch.
Requires: Both the document graph and automatic fact extraction, which an admin turns on separately; an AI provider key; Postgres app-state. It costs about one cent per typical document.
Read more →Connect your own tools
A token in the web address of the MCP connection is refused by default, because addresses end up in logs and history. Personal tokens now work on both MCP connection types, and every snippet Agnes gives you already uses the header.
Action needed: If a tool connects with ?token= in the address, switch it to an Authorization header, or ask an admin to re-enable the old way.
Company knowledge
PDFs without a text layer can be transcribed by the AI model, page by page and capped per document. Since 4 September it first triages a scan to avoid paying for documents nobody needs read in full.
Requires: SharePoint and scan OCR, which an admin turns on; about $0.006 per page.
Company knowledge
Crawling, converting, anonymizing and indexing SharePoint documents now run inside Agnes with no external job, and the standard image can do it. Changes arrive through SharePoint notifications, and an admin can watch or stop a run.
Requires: SharePoint, which an admin turns on.
Action needed: Instances that used an external extraction job must remove its settings; they are no longer read.
Governance, privacy and cost
From the Access page an admin opens View a page as them: the person's Library, catalog and empty states, read-only, with a banner and one-click exit. Nothing can be changed in this mode.
Governance, privacy and cost
My activity shows the cost of your AI use per model and per session, next to the token counts. Admin usage dashboards show cost too, and you can measure what one chat conversation cost.
Chat with Agnes
Paste a screenshot or file with Cmd-V or Ctrl-V and it is attached, and files added mid-conversation reach the agent straight away. Since 16 Sep you can also drag a file onto the conversation, and PowerPoint decks and RTF documents are accepted.
Requires: Web chat, which an admin turns on.
Chat with Agnes
Files the chat produced open in a preview: decks as slides, Word documents as text, images and PDFs in the browser, and the start of text files. Spreadsheets preview since 2 Sep. Other formats still need a download.
Requires: Web chat, which an admin turns on.
Governance, privacy and cost
The daily spend and per-conversation limits never triggered on the default chat engine; they now do, and costs include cached context. Admins can raise the limits in server settings again.
Requires: Web chat, which an admin turns on.
Metrics and business definitions
agnes pull copies every definition model you can read into your workspace, so your own AI tools follow them, and a query that breaks a recorded rule comes back with a warning. Linking a model to a data package makes it readable to everyone with that package.
Metrics and business definitions
Anyone can report that an answer looked wrong; the chat agent offers to do it when it cannot back up an answer. Admins work through the reports and record how each was resolved.
Requires: Postgres app-state.
Governance, privacy and cost
The internal tables about sessions, telemetry and audit now sit in an agnes-usage data package that an admin grants. People still see only their own rows.
Action needed: Grant agnes-usage on the Access page to the groups that should keep querying usage data; granting it to Everyone keeps the old behaviour.
Skills and plugins
A skill or agent template written in the builder can be reopened in the builder and changed, from the web, the command line or an agent. Before, fixing one sentence meant rebuilding and re-uploading a package.
Skills and plugins
Granting a skill, plugin or agent template to a single group used to look successful while members still could not see or install it. That grant now works everywhere: in the listing, on the item page and at install.
Company knowledge
Agnes mirrors who may read each SharePoint folder, so people find documents according to the synchronized permissions and the group mappings admins maintain. Since 1 Sep permission changes sync every 4 hours, and since 4 Sep site groups can be mapped to Agnes groups.
Requires: SharePoint connected; an admin turns permission mirroring on.
Governance, privacy and cost
Access is now one list you can read by group, by item or by person, with search that also finds people, links that keep the view, and Revoke on every grant. Admins can add people while creating a group.
Governance, privacy and cost
The Activity center now shows audit events, data syncs, model usage and agent changes in one timeline. Nearly every action is recorded, including queries run offline in the command line (table names and counts, never the query text). Admins also see web chat conversations and their token use in session review.
Agents that work for you
The agent builder is a conversation: describe the job and it fills in role, instructions and data, and nothing is saved until you press Save. Since 23 Sep the builder first looks through your catalog and company knowledge before it proposes a setup.
Read more →Agents that work for you
Preview in the agent builder is a real chat with the draft agent, so you can test it before saving or sharing it.
Requires: Web chat, which an admin turns on.
Agents that work for you
During a conversation an agent can pass one request to another agent you are allowed to run, get the answer back and continue. The second agent works with your access, never its owner's.
Company knowledge
The Knowledge tab opens on the kinds of things the facts describe, with counts of what you can see, and lets you narrow documents by client, industry, service or document type. Fact search also accepts a name.
Requires: Document facts, which an admin turns on.
Governance, privacy and cost
The Logout item used to only open the login page, so the next visit reopened Agnes signed in for up to 30 days. It now ends the session.
Company knowledge
An admin connects SharePoint in Add data source, browses sites and folders and picks them; they become collections. Since 30 Aug the admin can also search folders and browse deeper, and mark a folder for anonymization: Agnes records the processing job's declaration but cannot verify it.
Requires: An admin turns SharePoint on and registers an app in your Microsoft tenant. Until 2 Sep, documents were brought in by an external processing job.
Read more →Company knowledge
Facts about clients, people and engagements that a document-processing job delivers are stored with their source, a verbatim quote and a date. Search them on the collection page, from the command line or through agents; conflicting values appear side by side.
Requires: The document graph, which an admin turns on; Postgres app-state. Until 2 Sep facts came only from an external producer.
Read more →Governance, privacy and cost
Chat and all server-side AI features can call Claude through Google Vertex AI with the server's Google credentials, so no Anthropic key is needed. Model limits, budgets and usage records keep working.
Requires: A Google Cloud project with Claude enabled in Vertex AI.
Agents that work for you
The /api/agents builder endpoints are gone; /api/v1/agents is the only agent API and covers the same operations. The Agents page works as before.
Action needed: Scripts calling /api/agents must move to /api/v1/agents.
Agents that work for you
People an agent is shared with can now chat with it and call it, not only view it. The agent works with its owner's access, limited to what the owner attached, while row-level table policies filter rows for the person calling. Only the owner can change it.
Requires: The owner's per-caller usage breakdown needs Postgres app-state.
Read more →Chat with Agnes
A Files button in the conversation header lists the Word documents, decks and spreadsheets the chat produced, with Download and Save to Library. Since 28 Aug each new file also appears as a chip under the answer that made it.
Requires: Web chat, which an admin turns on.
Read more →Data apps
For safety, hosted data apps are no longer served on the main Agnes address unless an operator allows it; each app gets its own address, with automatic certificates and sign-in that returns to the app. From 30 August an app's own credential reaches only the data and catalog functions apps need.
Requires: Hosted data apps, which an admin turns on.
Action needed: Operators serving apps on the main address must set an app domain (data_apps.subdomain_base) or explicitly allow same-origin serving for trusted authors. App code that called admin or other APIs with its own token must be changed.
Company data and access
A truncated data file on the server used to be sent out and could overwrite your good local copy on the next pull. Agnes now refuses such a file, keeps your copy and shows the table as failing to admins.
Governance, privacy and cost
The audit log now has a retention period: records older than 365 days are deleted daily. Admins can change the period or keep records forever. Since 28 Aug other history, such as sync and model usage, can optionally be pruned too.
Action needed: If you must keep audit records longer than a year, set audit.retention_days (0 keeps them forever).
Skills and plugins
Picking a skill with / in the web chat used to answer "Unknown command" because plugins in your stack never reached the chat. They now arrive whole, including plugins kept at the root of a repository and helper programs that must stay executable.
Requires: Web chat, which an admin turns on.
Governance, privacy and cost
The login page no longer offers sign-in links by email by default, because mail scanners could use up a link before the person clicked it. From 29 August, a first link requested from an allowed domain creates the account instead of silently sending nothing.
Action needed: Admins whose users sign in by emailed link must add email to auth.providers to keep offering it.
Metrics and business definitions
A definition agreed in conversation can be submitted to the semantic layer. An admin's submission is stored right away; anyone else's waits for an admin to approve it.
Agents that work for you
An agent built on the Agents page could read everything its owner could, regardless of the data packages picked for it. It is now limited to what the page shows. Existing agents were converted automatically, which may narrow what some of them can reach.
Company data and access
Opening data that exists but is not shared with you now says so and offers Copy request for your admin. From 31 August, items in your Library also show which of your groups gave you access.
Company data and access
The separate Catalog and Marketplace pages were folded into the Library, one place for data, documents, skills and plugins; old links redirect. Since 30 August it has two tabs, Knowledge and Capabilities.
Connect your own tools
agnes onboard installs and checks an analyst workspace end to end: it refuses unsafe folders, pulls data, adds your plugins, runs diagnostics and lists the tool connections on offer. The setup prompt you paste into Claude Code shrank about six times.
Skills and plugins
Admins can allow a connected tool that changes data for a specific group. Since 30 Aug they register a tool server in a guided builder that checks the connection first and show or hide it per group; since 31 Aug tools that change data arrive switched off.
Agents that work for you
A Slack channel can be bound to an agent; mentions of the Agnes bot there are answered by that agent, running under its owner's identity, instructions, access and budget. Channel members authorized to use Agnes can continue the thread.
Requires: The Agnes Slack app installed by an admin.
Read more →Chat with Agnes
A Chat button on each agent card opens a conversation that runs as that agent, with its role, instructions and data limits. From 20 August a picker under the chat box lets you choose the agent before you start, and the agent introduces itself.
Requires: Web chat, which an admin turns on.
Read more →Metrics and business definitions
You can browse every semantic model you may read. Since 3 Sep this is the Definitions page, with tabs for models, metrics and glossary, one search across them and a shareable link for every view; a metric names the model that defines it.
Agents that work for you
An agent can hold up to 20 schedules: every few minutes or hours, daily at set times, or a cron expression. From 19 August the agent builder has a Schedules section with on/off switches, last run and an option to start from a skill.
Read more →Company data and access
An admin can connect a Snowflake account in Add data source and register its tables as live tables (queried in Snowflake) or as scheduled copies. Since 20 Aug the wizard also lets the admin browse the account's schemas and tables.
Requires: An admin connects the Snowflake account and grants the tables through data packages.
Read more →Governance, privacy and cost
The table access policy editor has a Builder: choose per column to show, hide, blank, pseudonymize or reveal it to a group, add rules for who sees which rows, and compare before and after. From 20 August a policy also covers every other registration of the same source.
Requires: Row and column policies, which an admin turns on.
Metrics and business definitions
You or your agent can check a query against the business definitions from the command line, the API or the AI connector. A warning means the query breaks an agreed rule, for example joins tables the wrong way, or uses a metric that cannot run where you plan to run it.
Requires: A semantic model that records such rules.
Governance, privacy and cost
People can sign in with a Microsoft Entra ID work account of one organization; personal Microsoft accounts are refused. Since 30 August their Entra groups can also become Agnes groups at each sign-in.
Requires: Your operator registers Agnes in your Microsoft tenant; group sync is turned on separately.
Company data and access
An admin connects a Databricks SQL warehouse and registers tables or SQL, refreshed on a schedule or, since 17 August, queried live in the warehouse. Unity Catalog metric views arrive as business metrics.
Requires: An admin connects a Databricks SQL warehouse.
Read more →Metrics and business definitions
Metrics, glossary and dataset descriptions are kept in an open format that admins load from a git repository or an upload and can export again. Snowflake semantic views followed on 19 Aug, Databricks metric views on 28 Aug, and a 6-hourly refresh of every source on 1 Sep.
Across Agnes
Every instance now uses the redesigned look. The left rail leads to New chat, Library and Agents; Chats lists, searches, pins and renames your conversations; the Library holds everything you can use. Old pages such as the dashboard and My Stack redirect, so bookmarks keep working.
Read more →Governance, privacy and cost
People can sign in with their Keboola account and are set up on first login. Optionally, every Keboola project they can reach is connected automatically with matching groups. Admins can also limit which sign-in methods the login page offers.
Company data and access
A data package or memory domain granted to one of your groups is now part of your stack immediately. Subscribing only decides whether the command line keeps a local copy. Admins can keep the old subscribe model with one setting.
Action needed: Admins: analysts' next pull may download packages nobody subscribed to, so plan for disk space, or set features.stack_auto_membership to false before upgrading.
Governance, privacy and cost
An admin can attach one SQL rule to a table kept on the server, filtering rows and masking columns by who is asking. It applies to queries, previews, snapshots, schema and connected AI tools, and every filtered answer says it was filtered.
Requires: Row and column policies, which an admin turns on.
Read more →Company data and access
Add data walks through connect, choose tables, bundle into a package and share. Each data package has its own page with tables and sharing, plus how many people have the data on their machine, and the admin overview flags tables in no package and packages shared with nobody.
Company data and access
Tickets with more than 100 comments keep all of them, and tickets join organizations by id. Since 17 Aug a month that fails to load no longer deletes its stored history; since 18 Aug comments show whether they were public or internal, and since 19 Aug the oldest comments are fetched correctly.
Requires: An admin connects Jira.
Governance, privacy and cost
Simulate a person on the Access page walks from a person's groups to each grant and names the data packages they cannot use, with a link to share a missing one. Since 20 Aug it also shows what their Library contains.
Chat with Agnes
Answers end with the tables, metrics, documents and terms they relied on, and Agnes marks any it never actually queried as unverified. Since September each source is a link that opens beside the chat.
Requires: Web chat, which an admin turns on.
Data apps
The chat agent can now create a hosted app, write its code and deploy it from a conversation, and the app reads company data as intended. Since 14 Aug the app also appears in your Library.
Requires: Hosted data apps and web chat, which an admin turns on.
Read more →Company data and access
With one switch on a connected Keboola project, the chat agent gets that project's native tools, such as SQL and table search, and an admin can grant or revoke the whole tool set for a group in one step. Tool calls also respond much faster.
Requires: Web chat and a connected Keboola project, both turned on by an admin.
Governance, privacy and cost
Tables marked to stay on the server can no longer be downloaded whole, and queries can no longer reach tables the person was never granted. Both are now refused on the server.
Chat with Agnes
Ask for a metric over time and the answer shows a chart. Since 12 Aug, questions about structure, such as how tables relate, get a diagram, and since 4 Sep a diagram can be enlarged, copied or saved.
Requires: Web chat, which an admin turns on.
Connect your own tools
agnes global enable installs your stack's plugins, the Agnes tool server and its data rules for Claude Code at user level, so they work in any repository, and keeps them up to date. agnes global disable removes them.
Connect your own tools
Run outside a workspace, agnes pull no longer creates a data tree in whatever folder you are in; it stops with a hint. Data commands run elsewhere use the workspace set up by agnes init.
Action needed: Scripts and CI jobs that run a bare agnes pull must set AGNES_LOCAL_DIR or pass --workspace.
Skills and plugins
The builder starts by asking what you are making, lets you write the text or upload a Markdown file, and saves straight to your Library as Private or for everyone. A private item can still go into your own stack, and unfinished drafts show up in the Library.
Skills and plugins
Cards and detail pages name who published each skill, plugin or agent: a colleague, or your organization with an Organization mark. Unchecked contributions carry a Community mark, and an admin can turn on verification that adds a Verified check.
Company knowledge
Owners can now share what they uploaded with groups they belong to or with everyone, and make it private again, without asking an admin. The sharing badge in the Library is the control.
Company knowledge
Documents and images you drop into chat are saved to your Library and searchable. Common formats open in a preview, dropping one file onto another makes a new collection, and an uploaded spreadsheet becomes a table you and the people you share it with can query.
Requires: Uploading through chat needs web chat, which an admin turns on.
Governance, privacy and cost
Before the agent runs a risky command, the chat shows Allow once, Allow for session or Deny. Silence or Stop counts as Deny, and every decision is audited. Since 1 Sep connected tools that change data ask too, unless an admin pre-approved them.
Requires: Web chat, which an admin turns on.
Skills and plugins
For tool servers an admin set up with sign-in, My connections now shows Connect and Disconnect instead of asking you to paste a token. Agnes then uses your own account, so you see only what you may see there.
Requires: An admin registers the tool server with sign-in.
