Changelog

New cross-server Tools inventory in the Hub, a peer to Servers, Clients, and Gateways. See every tool observed across your fleet with call volume, success rate, blocked count, anomalies, connected clients, average latency, and last-active time, then block or unblock any tool directly from the table or its detail drawer.

A global command palette, opened with Cmd/Ctrl+K or the header search trigger, for jumping to any page or action in the Hub without clicking through the menus. Type a few characters to filter pages and shortcuts and go straight there.

Google Antigravity and Zed join the list of supported MCP clients, each with one-step config detection and migration so their MCP servers route through Ultra just like Claude Code, Claude Desktop, Cursor, and Codex.

New built-in availability guardrail that monitors upstream MCP server transport failures and latency, trips when a configured error-rate threshold is reached, and blocks a degraded upstream until a cooldown recovery succeeds. Breaker state persists across gateway restarts so a failing server stays contained.

Table export is now generally available across the Hub's data tables. Export the current view of Traffic, Audit, Identities, Servers, and more to CSV or JSON, with column-driven output and formula-injection hardening built in.

The Hub's data tables gained multi-row selection with a unified toolbar, so you can select multiple rows at once and act on them together, such as exporting them to CSV or JSON, etc.

Copy-link buttons across Traffic, Audit, Clients, Gateways, and anomaly findings generate a deep link that reopens the exact trace, event, or finding for anyone on your team. Paste a link and the Hub restores the same drawer and detail view you were looking at.

A rebuilt Hub home page with a cleaner layout and a time-range filter that scopes the whole view, so you can see all activity across a specific period, whether that's the last hour, last 24 hours, or last week. Updated widgets surface a bevy of high-level activity from across the entire app, including top clients and tools, servers ranked by activity, and your most active identities, alongside a redesigned Fleet Health card that shows gateway status at a glance. Where the home page previously showed little more than recent events, it now gives you an immediate read on activity and trends across your MCP fleet.

Governance rules can now target multiple gateways at once with a multi-select scope, and adding a server or running a manual migration is gated through governance policy. Destructive deletions require typing "delete" to confirm, and the guardrail configuration UI received a broad polish pass.

The Server Detail page now shows a User column in two places, on both the Overview and Requests tabs, so you can attribute each MCP tool call to the user who made it directly from the table, instead of clicking into individual trace details.

New Identities page in the Hub that pulls every actor across your MCP fleet, both human users and AI agents, into a single identity view. Layered attribution ties each identity back to its gateways, sessions, and tool calls, and an assurance badge reflects how strongly the identity is verified. A shared identity link now threads through the Audit, Trace, Traffic, and Server Detail pages, so you can pivot from any event straight to the responsible identity.

Ultra Ledger, our Trust Score service for MCP servers, is now live and reachable directly from the Hub. Agents can check a server's Trust Score before connecting, and security teams can browse Ledger data without leaving Ultra.

A dedicated anomaly detection experience in the Hub. Review the findings surfaced by background scans of your MCP traffic, browse per-run scan history, tune how often scans run from every 15 minutes to once a day, follow clear first-run guidance, and trigger an on-demand scan whenever you need one.

Establish a baseline MCP configuration for your fleet and enforce compliance to it. Ultra continuously checks each gateway against its approved spec, flags any drift, and can automatically bring gateways back into compliance.

New built-in guardrail that contains the blast radius of cross-tool and cross-server attacks. It tracks content flow within a session and blocks a tool call when its arguments contain data produced by a different server's earlier response, shutting down prompt-injection chains that try to move secrets between servers, such as a poisoned Linear issue steering a filesystem read into a Slack message. Operators can also define forbidden tool-to-tool sequences.

New built-in guardrail that blocks access to credential files such as .env, SSH keys, and cloud credential stores, auto-redacts secrets in transit, and detects credential-harvesting patterns across tool call parameters and responses.

Jump straight to any page in the Hub's data tables by typing a page number instead of clicking through one page at a time. Since Ultra collects thousands of logs and events, this makes navigating large Audit, Traffic, Identities, and other views far faster.

New MCP client inventory page in the Hub. Aggregates every detected client across the fleet with last-seen activity, gateway attribution, and per-client metrics so security teams can see exactly which clients are talking to which servers.

Dedicated Governance page in the Hub for managing MCP allow/block policies across servers, clients, and agents. Block or approve any server or agent fleet-wide from one place, view the live list of active blocks, and one-click unblock. Block actions are also available directly on Server rows for admins.

Compose richer governance rules with multiple conditions and OR-separated server groups. The expanded validator preserves condition caps while letting you express policies that previously required several rules.

Ultra now runs cleanly inside Ona cloud development environments, treated as a first-class MCP client, so any background agents running in your environment can be monitored, observed, and secured just like any other client.

Hermes joins the list of supported MCP clients, with one-step config migration so Hermes routes through Ultra just like Claude Code, Claude Desktop, Cursor, Codex, etc.

Test guardrail configurations against historical traces before enforcing. Pick a scope, choose a time range, and see exactly which traces would have been caught, including a stateful evaluator shim that simulates rate-limit behavior over real traffic so policies can be tuned without risk to production.

New built-in guardrail that scans MCP request and response payloads for personally identifiable information. Detects emails, phone numbers, SSNs, and other sensitive identifiers, with configurable block, warn, or audit actions.

Token-bucket rate limiting and circuit breaking guardrail to stop runaway agent loops, flood attacks, and endpoint scraping. Org and workspace-scoped limits are statically partitioned across active gateways and recomputed automatically as gateways join, leave, or go offline.

Gateways now report Ultra version and workspace name, and the Servers list shows transport type and binary location on host. Idle gateways are distinguished from offline ones, and the Gateways page now shows the full team's gateways instead of only the current user's.

Trace details now include collapsible per-trace guardrail evaluation results. Inspect exactly which rules fired, which conditions matched, and what action was taken for any individual request. No more cross-referencing logs to understand why a call was blocked or warned.

Configurable security guardrails for MCP tool calls. Define policies to block, warn, or audit specific actions based on tool name, parameters, or calling context. Enforce least-privilege access at the protocol level.

Enterprise single sign-on with SAML 2.0 integration. Connect your identity provider for centralized authentication and automated user provisioning across your Ultra organization.

Sign in to Ultra Hub with your Google account. One-click authentication for teams already using Google Workspace.

Automated user lifecycle management with SCIM 2.0. Sync users and groups from your identity provider to Ultra Hub, with support for Okta and other SCIM-compatible providers.

Native Okta integration for SAML SSO and SCIM provisioning. Manage Ultra access directly from your Okta admin console with automatic user sync and deprovisioning.

Device trust and endpoint compliance via Jamf Pro. Verify managed device status and enforce security posture requirements before granting access to MCP infrastructure.

Real-time Slack notifications for security events, anomaly detections, and policy violations. Configure per-channel routing with customizable alert thresholds.

Launched docs.ultra.security with comprehensive guides for installation, configuration, client setup, Hub management, observability, and security concepts.

New application-level security events system with a dedicated Admin Log page in the Hub. Tracks login attempts, member role changes, invite lifecycle events, and organization management actions with structured, auditable security trails.

Five-tier role hierarchy of Owner, Admin, Member, Viewer, and Beacon, with per-route permission enforcement across the Hub. Ensures proper least-privilege access for all users.

Complete security platform purpose-built for Model Context Protocol ecosystems with intelligent threat detection and response.

Complete visibility into your MCP ecosystem with real-time monitoring, automated discovery of all agents, servers, and tools. Includes detailed trace views for every MCP interaction with full request-response inspection.

Comprehensive logging for all MCP interactions with tamper-proof audit trails, real-time analytics, and compliance reporting. Full request and response payloads, latency breakdowns, and policy evaluation results.

Behavioral analysis of agent-tool interactions that establishes baselines and flags deviations in real time. Detects unusual tool call patterns, unexpected parameter values, and suspicious sequences.

Advanced client and agent identity verification with cryptographic attestation, tamper-proof mechanisms, and zero-trust authentication.