Added:
- See what a tool can do - Tools in your inventory carry capability tags such as network access, filesystem writes, and shell execution, shown in the tools table and on each tool’s detail panel. Each capability records how it was determined, so a resolved call site is distinguishable from a match against a catalog of known tools. Tags fill in as your repositories are scanned again
- Cached tokens are priced separately - Cost now prices cached tokens apart from fresh ones, so prompt caching shows up as the saving it is instead of disappearing into the input count. Session and turn views break out cache hits and cache stores, and you can set your own cache read and write rates alongside input and output on the Model pricing page
- Resend a pending invitation - Through the API, admins can send the email for a pending invitation again instead of revoking it and starting over. An expired, accepted, or revoked invitation still has to be recreated
- Input token counts exclude cached reads - OpenAI and Gemini report cached tokens inside the input count. Those are now subtracted and reported on their own, so input figures for agents on those providers read lower than before. Activity already recorded keeps the counts it was stored with
- Account setup no longer needs admin permissions - Accepting the license agreement and completing the qualification step are open to every member, so people who are not admins can finish setting up their account
- Platform reliability - Guardrail services start reliably after a cold start, and requests are handled consistently across model providers
- Role changes respect the hierarchy - Nobody can grant a role above their own or act on a member ranked above them, and an organization can never be left without an admin. A blocked attempt returns the reason
- Platform hardening - Tightened the runtime configuration of guardrail services and widened vulnerability scanning of platform images
Added:
- Switch between organizations - If you belong to more than one organization, Switch organization in the account menu moves you between them without signing out
- Admin view of every API key in your organization - Through the API, admins can list all keys in the organization, personal and organization-owned, see who owns each one, and revoke any of them
- List the agents Flint AI is tracking - A new endpoint returns the agents that have sent guardrail traffic or finished an evaluation, with the date each was first seen. The list is cumulative, so an agent stays on it after it goes quiet
- Cost for the latest Claude and GPT-5 models - Default pricing adds four current Claude models and the GPT-5 mini and nano tiers. Cost is calculated when you view it, so spend already recorded against these models appears too, not only new activity
- GitHub and GitLab are reported separately - Inventory records which platform each agent was found on, so results from the two can be told apart. Existing GitHub results are unchanged, and the new value appears once your scanner is updated
Added:
- GitLab as a data source - Connect GitLab in Settings > Data sources and scan its repositories for agents, alongside GitHub
- Sessions on the agent detail page - The Sessions tab groups an agent’s activity into sessions, and a detail panel breaks each session down turn by turn
- Event detail inside a turn - Open a turn in Live or on an agent to see the events it contains, including tool calls and the content tools returned
- Interactive asset graph - The graph on an agent’s Overview and Assets tabs expands to show what the agent connects to, and opens fullscreen
- Readable large numbers - Token counts and costs are abbreviated in tables and charts, so long numbers no longer stretch a column
- Consistent model health score - The score reads the same way in the models table and in the model detail panel
- Detail panels close from the main view - Selecting the main content closes an open detail panel
- Tool results in Live events - Tool result content displays instead of appearing empty
- Asset table dates - Last seen and created dates display correctly in the models, MCP servers, and tools tables
- API keys are revoked when a member leaves - Removing someone from your organization now revokes the API keys they created, so access ends with the membership
- API keys inherit the role of whoever creates them - A new key takes the creator’s role and can no longer be issued with a higher one
- Blocked content is stored redacted - When a guardrail blocks a message, the retained record no longer holds the original content
- Tool results are covered by redaction - Guardrails read the tool results an agent receives, so redaction applies to that content too
Added:
- Cost tracking for agents - Agent detail pages chart cost by month, cost per session, and burn rate, and the agent table adds Cost (MTD), $/session, and Cap usage columns
- Agent spend caps - Set a monthly spend cap on an agent, with a cap-aware burn rate and a days-to-cap forecast, so teams can track and manage agent spend
- Cost data page - Spend and per-model pricing in one place
- Automatic re-authentication - Sessions prompt a new sign-in when authentication expires, keeping access secure
- Platform reliability - Service availability, update handling, and API request validation improved across the platform
- Platform hardening - Tightened service security configuration and updated dependencies
Added:
- Organization member removal - Remove a member from your organization in the interface or through the API
- Identity lookup from API keys - A new endpoint returns the identity behind an API key, so you can attribute activity in your own logging and workflows
- API reference - Platform endpoints are documented in the API reference
- Guardrail coverage stays in place - An organization always keeps at least one active policy, so agents are never left unprotected
- Guardrails availability during updates - Guardrails keep evaluating while the platform updates
- Guardrails under concurrent load - Detectors evaluate reliably when many requests arrive at once
- Connected assets on the agent detail page - Connected assets now display consistently
- Gemini requests without a role field - Improved compatibility for requests that omit a role
- Inventory finding severity - Inventory findings display with their intended informational severity
- Organization creation - Creating an organization produces a single organization, even if the request is retried
- Invitations for existing members - Inviting someone who already belongs to the organization returns a clear conflict response
Initial early access release.Added:
- Sign-in and organization setup - Sign in with GitHub, Google, or email, then create organizations and workspaces, invite teammates, and issue organization-scoped API keys
- GitHub-based agent discovery - Find the agents in your repositories with a GitHub Action. See Discover your agents
- Central agent inventory - See the models, prompts, tools, MCP servers, and sub-agents behind every agent in one place
- LLM-based scanning - Scan agent code and MCP servers for issues
- Guardrails onboarding through the Flint AI Python SDK - Connect running agents to the guardrails proxy. See Monitor and protect your agents
- Policy-based guardrails - Detectors for jailbreaks, toxicity, PII, secrets, PHI, and custom regular expressions, plus tool allow and block lists
- Configurable enforcement actions - Block, redact, or alert when a policy matches