MCP Gateway

Your team's context lives in tools like Linear, Jira, and Slack. With the MCP Gateway, your coding agents can reach all of them through the Sourcebot MCP server with admin controls built in. Choose from more than 30 supported connectors, or add any remote MCP server as a custom connector.

• Scoped to you: each member signs in with their own account, so a connector only returns data they can see. Credentials stay in Sourcebot and never reach the MCP client.
• Discoverability: agents already know which connectors are available in the workspace. When a member isn't signed in to one yet, agents can show them a sign-in link.
• Admin control: owners choose which connectors and tools agents can use. Changes apply right away.

See the docs to get started.

Audit log viewer

Owners can now browse audit logs in Settings → Workspace → Audit Log, filtering by person and event. Audit logs now record more events, including sign-ins, access tokens, SCIM membership, and more. Available on the Enterprise plan. See the docs.

Improved analytics

The analytics page has a redesigned active users chart, which you can view by day, week, or month and break down by feature. A new usage leaderboard shows each member's active days, searches, Ask messages, and MCP tool calls. Available on the Pro plan. See the docs.

---

Added

• APIAdded includeTotalCount and includeRefs query parameters to GET /api/commits that skip counting every matching commit and looking up each commit's branches and tags, both of which are slow on large repositories.
• Audit logsAudit records now include actorLabel and targetLabel, the display names of the actor and target when the event was recorded.
• Code browsingAdded repository home pages at /browse/<repo>, which show the README at the repository's root.
• IndexingAdded revisions.overrides to connection configs, allowing different branches and tags to be indexed for specific repositories.
• Knowledge BaseAdded a View knowledge base action to repository menus in Knowledge Base settings to open generated documentation in a new tab, including after a later failed scan.
• Knowledge BaseAdded reasoning effort for Amazon Bedrock Claude and OpenAI models in Knowledge Base stages.
• MCPThe Sourcebot MCP server now tells MCP clients what its tools are for when they connect.
• Permission syncingAdded user-driven permission syncing for Azure DevOps Cloud through Microsoft Entra OAuth.
• Sign-in & membersAdded server-side telemetry for how members join an instance (invite link, email invite, approved request, auto-join, SCIM).

Changed

• APIA request whose Authorization token is rejected now falls back to a valid X-Sourcebot-Api-Key header. Previously, only an unknown or expired OAuth token or an invalid Bearer API key fell back.
• Audit logsRemoved the SOURCEBOT_EE_AUDIT_LOGGING_ENABLED environment variable. Audit logging is now always enabled, and audit logs are always pruned according to SOURCEBOT_EE_AUDIT_RETENTION_DAYS.
• ConnectorsRemoved the Needs approval tool permission. Connector tools are now Allowed or Blocked, new tools start Allowed, and tools that previously needed approval are now Allowed.
• IndexingUpdated the bundled Zoekt version.
• Knowledge BaseKnowledge Base stages without a chosen reasoning effort now use high when their model supports it, and Discovery and Overview no longer inherit the Survey effort.
• Language modelsUpgraded the AI SDK to ai ^6.0.309 and the latest v6 provider packages.
• SettingsRenamed the Ask Sourcebot settings pages to Connectors and the Connections settings page to Code Hosts, and moved shared skills to their own page. Old URLs redirect.
• Sign-in & membersImproved logging for the Bitbucket Server OAuth flow.

Removed

• Audit logsRemoved usage events from the audit log: user.performed_code_search, user.performed_find_references, user.performed_goto_definition, user.created_ask_chat, user.listed_repos, user.fetched_file_source, user.fetched_file_tree, and user.fetched_file_blame. Existing records stay available through the audit API until the retention policy removes them.

Fixed

• Ask SourcebotFixed chat page titles repeating "Sourcebot".
• Ask SourcebotFixed OpenAI models in Ask Sourcebot filling in every optional connector tool argument, which made connectors reject the call.
• Ask SourcebotFixed private chats showing "Private Chat" as the browser tab title to people who can view them, instead of the chat's name.
• Ask SourcebotFixed oversized Ask Sourcebot tool results causing model requests to fail.
• Code browsingFixed slow file previews on repositories with long histories, which loaded and counted the file's entire commit history even while the History panel was closed.
• ConnectorsFixed adding a connector failing when its OAuth server advertises more than 200 scopes.
• ConnectorsFixed connectors requesting every OAuth scope the connector advertises instead of the scopes chosen when adding the connector.
• ConnectorsFixed owners who haven't connected a connector being unable to see or manage its tools.
• ConnectorsFixed adding a duplicate connector not being rejected until after the OAuth scopes step.
• Knowledge BaseFixed Knowledge Base scans failing with "prompt is too long" when an agent searched a repository with minified or generated files, with read tools now cutting long lines, paging through files, and capping each result as the Ask Sourcebot and MCP tools do.
• Knowledge BaseFixed Knowledge Base action menu icon spacing to match repository and connection menus.
• Knowledge BaseFixed application navigation freezing after viewing Knowledge Base run logs.
• Knowledge BaseFixed Knowledge Base scan failures hiding their cause, with job logs now keeping an error's cause, aggregated errors, and fields such as its HTTP status, and scan errors summarizing the agent failures behind them.
• Knowledge BaseFixed Knowledge Base usage going unrecorded when the database was briefly unreachable, with usage now recorded after every step so a scan stopped by its budget no longer shows less usage than the budget.
• Knowledge BaseFixed Knowledge Base scans retrying output-limit failures and re-running failing full scans every day, with repeatedly failing full scans now backing off while scheduled scans run as delta scans.
• Knowledge BaseFixed a React error when choosing a reasoning effort on the Knowledge Base configuration page.
• Language modelsFixed Amazon Bedrock Claude models never using prompt caching, which made Knowledge Base scans and Ask Sourcebot resend every step's full history at full price.
• Language modelsFixed Amazon Bedrock Claude responses being cut off at 4,096 output tokens, with thinking now on by default and a new maxOutputTokens option to override the output limit.
• MCPFixed OAuth client registration returning server errors for malformed JSON or unsupported content types.
• MCPFixed MCP clients not starting a new session after the Sourcebot MCP server restarts.
• MCPFixed the MCP server's sign-in challenge naming the OAuth metadata parameter resource_metadata_uri instead of resource_metadata, which kept MCP clients from finding where to sign in.
• Sign-in & membersFixed signing in from a link, such as a search or Ask URL, going to the home page instead of the page you opened.