Release notes

User-facing changes to Alpacon, grouped by the month they shipped, newest first. Each month opens with a few highlights, then lists the rest of that month’s updates across the web console, CLI, and agent.

July 2026

  • Live command output streaming—Work session viewers and the CLI now show a command’s output as it runs, with sensitive values masked, instead of only after the command finishes. See Live activity.
  • Applications for AI agents (Beta)—Register AI agents and other non-human callers as applications and issue scoped service tokens for them, each with its own per-token activity log; AI agent is now the default application type. See Applications.
  • Approve requests from Slack (Beta)—Connect your workspace to Slack and approve or reject requests from an interactive Slack message, with a reply sent back to the requester. Slack integration is now available in production.
  • Connect AI agents through MCP—AI Connect provides guided setup to connect AI agents over MCP, now including a Codex client alongside the existing options. See MCP getting started.
  • Session risk analysis heatmap—The audit console aggregates advisory risk findings from analyzed sessions into a heatmap, filterable by technique and time, so reviewers can spot recurring patterns. See Session history.
  • Low-risk auto-approval policies—Superusers can define policies that automatically approve clearly low-risk requests, so reviewers spend their attention on the rest. See Approvals.
  • Duration-based work sessions—Request a session for how long you need it; the approver sees the requested duration and any adjustment made when granting. See Create a work session.
  • Real-time server monitoring—The server detail page has been redesigned as a live monitoring dashboard, with metrics and status updating in place. See Monitor a server.
  • CLI: safer secrets and session control—alpacon exec --env keeps secrets off the command line, alpacon work-session cancel withdraws your own pending request, and alpacon websh records searches recorded sessions. See the CLI reference.
  • MFA with an authenticator app on every plan—One-time-password (OTP) MFA is now available on all plans. See Security settings.

June 2026

  • Notification center—A workspace-wide notification feed opens from the bell in the top bar and gathers approvals, security events, server status, and monitoring alerts; a workspace can also route notifications to email and browser push, so approvals and alerts reach you outside the console too. See Notifications.
  • Human-in-the-loop approval for commands—When a command’s risk is uncertain, execution pauses and a Superuser reviews the command and its risk rating, then approves or denies it before it runs. See Approvals.
  • Runtime governance from the CLI—A new alpacon approval command lists and acts on requests, alpacon exec --detach with alpacon exec logs runs long commands without holding a connection open, and alpacon edit opens a remote file in your local editor and saves it back. See CLI approval reference.
  • Ansible server registration—Register servers with an Ansible playbook through a guided wizard in the web console or alpacon server create --method ansible from the CLI. See Register a server.
  • Lower-memory file transfers—The CLI and agent stream large transfers and package uploads and downloads to and from disk instead of buffering whole files in memory, so big transfers use far less memory. See the CLI reference.
  • Recover stuck agents—alpamon unregister clears a server’s local and remote registration state, and alpamon register --force recovers a registration that got stuck partway. See Register a server.
  • Timezone-aware emails and inputs—Notification emails render in each recipient’s timezone, and date and time inputs in the web console use your display timezone—no more timezone math for distributed teams.

May 2026

  • Work Sessions is generally available—Interactive access—terminal, editor, file transfer, and commands—now runs inside a scoped, approved, time-bound work session, promoted out of preview and surfaced under a dedicated Execution area. Interactive access no longer relies on standing credentials. See Work sessions.
  • Session timeline, recordings, and AI analysis—Every work session has a unified timeline of terminal, command, sudo, and file-transfer events, a replayable recording, and an AI-generated analysis that flags risky activity for reviewers. See Session history.
  • Manage work sessions from the CLI—Create, approve, reject, revoke, inspect, and replay sessions from the terminal, and attach any exec, websh, cp, or tunnel to a session with --work-session. See the work-session CLI reference.
  • Redesigned approvals queue—The approvals page moved to a master-detail layout, so reviewers can scan pending requests and open one for full detail side by side. See Approvals.
  • Audit console—The former Monitoring area is now the Audit console, with sessions, sudo grants, and events organized for review and a risk badge on each session in the list. See Audit.
  • Live activity for admins—A real-time page shows work sessions in progress, so an admin can watch activity as it unfolds and complete or revoke a session. See Live activity.
  • Redesigned dashboards—The admin dashboard was rebuilt, and members now get their own dashboard as a landing page.
  • Move a server between workspaces—alpamon migrate moves a registered server to another workspace and rolls back automatically if the move fails.
Last updated: