- New: Built-in MCP server at /api/mcp, so Claude Code and other AI clients can use your Broadcast API with an API token, no install needed.
- New: Users API for admin API tokens: create, update, deactivate and delete users, and manage their channel and system permissions. Sudo users are read-only.
- New: Set a rate limit on each API token, or leave it blank to use the installation default.
- Fixed: Admins can assign channel access to newly created users again, instead of hitting a “route cannot be found” error.
- Fixed: A new user with no channel access now shows the channels you can grant, instead of an empty page.
- Fixed: Autopilot schedules run at the time you picked. Existing schedules saved from a browser outside UTC may now show the time they have actually been running at; run bin/rails autopilots:correct_drifted_schedule_times DRY_RUN=1 to preview a repair.
- Fixed: Autopilot drafts no longer fail with empty answers when a reasoning model spends its whole token budget on thinking.
- Fixed: GDPR-erased subscribers are never returned by the API, and their placeholder email can no longer be used to recreate or re-enroll them.
- Fixed: Deleting a user who had run channel maintenance or confirmed AI actions no longer fails.
- Fixed: Copy buttons on the Agents page and webhook code samples copy again.
- Fixed: API token lists show every permission a token has, including Users, Templates, Suppressions, Autopilot and Opt-In Forms.
- Improved: The subscriber Last Emails tab now shows sequence and personal or transactional emails, not just broadcasts.
- Improved: Autopilot drafts turn bare URLs into links and use today’s date.
- Improved: The Send Email form on a subscriber’s page no longer mentions Liquid variables.
- Improved: The agent setup guide and API skill manifest now list the Users API, suppressions and each token’s real rate limit.