Kody v2026-07-20

What's new

• Assistant's-home positioning across the site — Homepage, README, and docs now lead with clearer messaging about Kody as your durable, self-service assistant home. (#790, #791, #796)
• Public blog — A new /blog with an initial set of positioning posts explaining what Kody is and why. (#800)
• Stripe billing with free and pro tiers — Sign up for a free plan or upgrade to Pro ($5/mo), with invite-assigned plans and a new account billing page. (#792)
• Community social features — Public profiles at /@username, plus follows, stars, a personal activity timeline, avatars, and new privacy controls. (#795)
• Admin visibility into community activity — Admins can now see a gated feed of community forks and ratings, with updated privacy docs. (#794)
• Admin feature flags — Admins can manage feature flags with rollout controls for staged releases. (#788)
• Searchable package and integration pickers — Account pages now use a combobox to find packages and integrations instead of entering raw IDs. (#799)
• Distinguishable, renameable passkeys — Passkeys get default nicknames from your authenticator/browser, can be renamed, and show created/last-used dates. (#798)
• Username changes now update package scopes — Changing your username automatically rewrites your package scopes, with a warning shown on the account page. (#793)
• More actionable platform feedback prompts — Agents are now steered to submit more specific, actionable feedback to admins. (#789)

Kody v2026-07-19

What's new

• Consent-gated platform feedback — You can now submit attributed feedback directly to admins, with clear consent prompts and privacy/retention updates explaining what's collected. (#783)
• Real-time feedback delivery to admins — Submitted feedback is now dispatched through queued, retryable notifications so admins are reliably alerted as soon as it comes in. (#784)
• Richer admin feedback tools — Admins get a new feedback review page with deep links straight to each report, submitter identity snapshots for context, and more detailed notification content. (#785)

Kody v2026-07-17

What's new

• Outbound email delivery events — Delivery lifecycle updates are ingested, persisted, and exposed to email capabilities and package subscriptions. (#780, #781)
• Tighter MCP instructions — Server instructions and search/execute descriptions are trimmed so every session carries less static prompt weight. (#779)

Fixes

• Passkey sign-in skips TOTP — A verified passkey assertion completes MFA without an extra authenticator code when 2FA is enabled. (#774)
• Invite-gated social signup — Production OAuth account creation accepts a valid invite the same way password signup does. (#773)
• Logout updates the nav — Session state refreshes after router form mutations so Log out no longer leaves a stale logged-in shell. (#776)

Kody v2026-07-16

What's new

• One-click community install — Trusted (and warned untrusted) listings install into your account as live saved packages from the detail page. (#760, #763)
• Featured starter packages — Admins can feature trusted listings, which appear on onboarding for one-click install. (#765)
• MCP client onboarding tabs — Onboarding shows copyable configs for Cursor, Claude, VS Code, and more, polished for mobile. (#761, #764)
• Public onboarding — /onboarding is reachable without signing in so visitors can preview MCP setup. (#766)
• Faster search discovery — Batch entity detail, inline call shapes, and related operations cut search round trips for agents. (#769)
• Raw-fetch host nudges — Repeated execute fetches to the same host suggest OpenAPI bindings or a saved package. (#770)

Fixes

• Repo session git publishing — Raw Git pushes from repo sessions work again with a complete filesystem adapter for isomorphic-git. (#762)
• Jobless community forks — Publishing packages with no scheduled jobs skips no-op JobManager alarm sync. (#757)
• Execute fetch gateway — Raw-fetch host counting keeps a real Fetcher so MCP execute no longer breaks on WorkerLoader type checks. (#771)

Kody v2026-07-14

What's new

• Package lifecycle guidance — Official docs clarify durable package reuse, execute exploration, and repo-backed authoring lanes. (#752)
• Package update capability — package_set_hidden becomes package_update, and search resolves exact package UUIDs, kody ids, and hosted URLs. (#753)

Kody v2026-07-13

What's new

• Account packages browser — /account/packages lists saved package metadata with search, filters, sort, and infinite scroll. (#745)
• Hide packages from search — Packages can be marked hidden so they stay out of default search while remaining runnable and listable. (#746)
• Community README markdown — Package detail pages render READMEs as safely parsed markdown instead of raw preformatted text. (#740)
• Screencast UX polish — OAuth redirect URI card, onboarding/community CTAs, verify-email CTA, integration logos, and connector toggle design from the bestcodes review. (#744)
• Admin users search — The admin users page supports username/email search, role filter, and infinite scroll. (#738)

Fixes

• Community OG cards — Listing OG images include the package icon, clamp long descriptions, and drop the awkward "Use Kody to" prefix. (#739, #743)
• Connected accounts load — Third-party connections preload with account route data so SPA navigation no longer flashes a loading state. (#741)
• Leaner account overview — Duplicate section shortcut panels already covered by account nav are removed. (#737)

Kody v2026-07-12

What's new

• Email verification before MCP — New accounts verify email before MCP OAuth grants, with preserved resume targets through signup and verification. (#734)
• Richer execute media results — Downstream MCP image, audio, and resource blocks pass through execute within bounded media limits. (#734)

Kody v2026-07-11

What's new

• Invite waitlist — Public signup defaults to a Kit-backed waiting list with welcome email, plus a compact signed-out banner across the app. (#728, #729, #730, #731)
• Admin insights dashboard — /admin/insights adds chart-first platform analytics, and per-user usage moves onto the users drill-down. (#723, #724)

Fixes

• Community icons track publishes — Listing icons refresh from the package's published commit so updated community-icon.* files show up. (#725)

Kody v2026-07-10

What's new

• Bring-your-own-keys integrations — Integrations onboarding explains the BYOK model, and account nav gains a calmer subnav for Secrets, Integrations, and related settings. (#705, #706)
• System email package subscriptions — Packages can subscribe to operator system-inbox mail, not only user inbound messages. (#700)
• Email reply attachments — email_reply accepts optional base64 attachments on outbound replies. (#701)
• Community package icons — Listings can ship community-icon.* artifacts shown on community pages with generated fallbacks. (#712, #718)
• Admin system-email HTML preview — System email detail renders sandboxed HTML, text, and source tabs instead of raw markup only. (#698)
• Clone-edit-push package authoring — Coding agents are steered to the git lane for package creation instead of only inline package_save blobs. (#714)

Fixes

• OAuth providers: Notion and Canva — Notion token exchange supports Basic Auth, and Canva Connect supports confidential + PKCE together. (#711, #716)
• Binary fetch bodies — The MCP fetch gateway preserves binary request bodies so multipart uploads are no longer corrupted. (#702)
• Execute RPC stub reuse — Reused execute sandboxes no longer fail with disposed RPC stubs on community publish and repo commands. (#709)
• OAuth credential autofill — Connect and secret fields stop being treated as website logins by password managers. (#717)
• Integration identity — Canonical provider keys are the single integration identity for writes and lookups. (#719)

Kody v2026-07-09

What's new

• Homepage value prop — The signed-in home page explains Search → Execute → Build with clearer capabilities and an onboarding CTA. (#693)
• OpenAPI integration utilities — Summarize specs, scaffold thin clients, and save curated provider bindings from untrusted OpenAPI documents. (#692)
• Package-scoped secrets — Secrets hard-migrate from app scope to package scope, with package approval required across mounts and secret-aware calls. (#694)
• Social login brand buttons — Login and signup server-render provider buttons with brand icons so they no longer pop in after hydration. (#684)
• Public OG images — Every public page ships a Satori-generated Open Graph image styled to light-mode design tokens. (#691)
• Approve all hosts — After OAuth connect, approve every pending host link for saved token secrets in one click. (#695)
• Package invocation token metadata — List and get read-only token metadata (scopes, timestamps, revocation) via new package capabilities. (#687)

Fixes

• Faster integration discovery — integration_discover prefers cached surface lookup and falls back to live discovery, avoiding long timeouts. (#697)