API & compatibility

Documentation and API Changelog

Customer-visible product documentation, API, and MCP changes.

Customer-visible product documentation, external API, and Harness MCP changes are recorded here. Newest entries appear first.

2026-08-20 - Documentation contracts

Separate generated hosted Build and Workspace MCP references with available input/output schemas, authorization, tool annotations, and recovery guidance.
Public Markdown and public-only machine-bundle documentation endpoints with documentation contract and deployed-build metadata.
Validation and rendering support for an exact, pinned local Build MCP package manifest, kept separate from hosted MCP contracts.
CI documentation contract checks and a privacy-bounded zero-result search health report.
Immediate exact-version Build MCP release synchronization, with a daily registry recovery check and a review-only pull request boundary.
Text-free public-document feedback for helpful, not-helpful, and outdated signals, with validated document/heading ids and bounded anonymous traffic.
Dedicated Scheduled Work, Assistant Knowledge, Tenant Administration, and Workforce and Storyboard operator guides.
Revision-aware documentation feedback operations and privacy-bounded search selection outcomes, without raw queries or reader identifiers.

Public documentation summaries now use canonical public URLs instead of exposing repository source paths.
Documentation ownership, monthly health review, and post-deployment release verification are explicit requirements.
Documentation owners now review outdated feedback within two business days and route confirmed or recurring issues to the documentation backlog.

Build MCP adds a local-only artifact inspection tool that validates package boundaries and reports the bundle identity without authenticating or creating a remote draft. Deploy can require that inspected identity and fails locally if source changed before upload.
Workspace MCP adds tenant-bound workspace discovery and cursor pagination for conversation search.

Content-identical Build packages now produce the same archive hash across retries instead of embedding the packaging time.
The local Build MCP now rejects credential-bearing or insecure non-loopback API URLs and rejects manifests too large for the remote create envelope before authentication or upload.
Artifact, deployment-operation, and workspace placement ids are now UUID-validated before database access, and local Build errors redact absolute workspace paths.
Build workspace placement is filtered to the active tenant, and Build and Workspace report server version 0.5.0.

Build MCP 0.4.0 adds deterministic retry identity, durable deployment operation progress, workspace and draft discovery, trusted smoke reruns, state-bound cleanup plans, and a dedicated artifact-delete OAuth scope.
The local package adds a minimal artifact scaffold, resumable progress waits, structured recovery errors, and an automated live-client certification run.
Build MCP trusted artifact validation with bounded smoke and rendered-page evidence that does not require an external browser session.
Explicitly confirmed cleanup for private, unpromoted drafts created by the same MCP connection.
Stdio Build connection verification and phase-level deployment progress.

Local artifact apps may live anywhere under the configured workspace; the stdio package now maps them to stable trusted source roots without changing existing workspace-root or artifact-apps/... identities.
Build and Workspace report server version 0.4.0.

Read-only Workspace MCP conversation search and recent-message tools with an explicit chat:read scope and tenant plus conversation-visibility checks.
Per-product OAuth authorization, granted-scope, and last-successful-call status in Developer Access.
Single-use, product-bound end-to-end connection verification from Developer Access through platform_connection_check.
Owner-scoped OAuth authorization listing and revocation with exact per-grant activity state.
Cursor-paginated conversation reads, workspace names, per-message truncation flags, and bounded visible-transcript search.

Every hosted MCP tool now declares its Build or Workspace ownership directly; product catalogs no longer infer Workspace membership as a complement.
MCP activity telemetry records product, tool, auth kind, and outcome without recording tool arguments.
Build and Workspace report server version 0.2.0; /mcp/harness now sends deprecation and successor-link headers without scheduling a removal date.

Documentation search now indexes full curated document content and returns ranked excerpts.
Customer documentation is separated from internal runbooks and contribution material.