Agno Release Notes

Changelog

New Features

Added ValkeyDb as a fast in-memory database for agents, teams, and workflows. See Docs

Added a ValkeyDB vector store with vector and keyword search. See Docs

Redmine Tools: Added RedmineTools to manage issues, comments, and time logs in Redmine, an open source project management tool.

TokenLab: Added TokenLab as a new OpenAI-compatible model provider.

Improvements

Session Context: Skip a redundant model call when saving session context.

AG-UI: Extended human-in-the-loop confirmation, input, and feedback to AG-UI.

User Memory & Profile: More reliable memory and profile extraction from conversations.

Surface a clean error when an MCP server becomes unreachable.

Support tools that respond with only structuredContent.

Bug Fixes

DoclingReader: Accept local file-path strings.

JSONReader: Honor chunk=False when reading JSON documents.

Fix incorrect page number interpretation for single page pdf’s.

Auto-try a blank password for encrypted PDFs.

Structured Outputs: Reliably parse responses whose field values contain braces.

File & Coding Tools: Keep search and listing contained to the configured root.

Antigravity: Prevent symlinked files from escaping the agent directory.

Cassandra: Derive the vector dimension from the configured embedder.

Mistral: Add frequency_penalty, presence_penalty, and stop, and keep zero-valued params like temperature=0.

YouTools: Fix failing searches and add region, language, and freshness filters.

Workflow Metrics: Include metrics on WorkflowCompletedEvent.

Timer: Fix Timer.elapsed for very fast operations.

What's Changed

• cookbook: improve AG-UI cookbooks with db persistence and better README by @Mustafa-Esoofally in #8867
• fix: skip symlinked Antigravity agent sources by @Success6666 in #8721
• fix: include metrics in workflow completed events by @anuragts in #8866
• fix: keep root searches contained by @Success6666 in #8719
• fix: surface MCP structuredContent-only results by @Success6666 in #8695
• fix: DoclingReader accepts local file path string by @sannya-singal in #8877
• fix: honor JSONReader's chunk=False by @sannya-singal in #8882
• fix: derive Cassandra vector dimension from embedder instead of hardcoding 1024 by @wvwoo in #8890
• [feat] Add TokenLab model provider by @hedging8563 in #8833
• feat: human-in-the-loop confirmation and user input over AG-UI by @Mustafa-Esoofally in #8837
• feat: add Valkey support (storage db + vector db) by @atao2004 in #8141
• fix: expose missing search params and fix livecrawl enums in YouTools by @anshul-jain-devx108 in #8906
• fix: PDFReader strips leading digits from single-page PDFs as page numbers by @sannya-singal in #8909
• fix: auto-try blank password for encrypted PDFs by @GaelReinaudi in #5160
• fix: avoid redundant session context model calls by @dexhunter in #8907
• fix: skip JSON string literals when counting brace depth in _extract_json_objects by @Diwak4r in #8829
• fix: Timer.elapsed no longer recomputes live when elapsed_time is 0.0 by @chuenchen309 in #8923
• fix: surface a clean tool error when the MCP server dies mid-call by @sannya-singal in #8928
• [cookbook] Add ScyllaDB vector store example by @zseta in #8932
• refactor: reduce ShellTools hardening to docs and existing confirmation API by @nolanchic in #8854
• feat: add Redmine tools by @mauricio-porto in #3841
• fix: frame transcript in UserProfile/UserMemory extraction prompts by @Purvi09 in #8899
• fix: forward supported sampling params and stop dropping zero values by @ly-wang19 in #8389
• chore: Release v2.7.3 by @harshsinha03 in #8929

New Contributors

• @wvwoo made their first contribution in #8890
• @hedging8563 made their first contribution in #8833
• @atao2004 made their first contribution in #8141
• @GaelReinaudi made their first contribution in #5160
• @dexhunter made their first contribution in #8907
• @Diwak4r made their first contribution in #8829
• @chuenchen309 made their first contribution in #8923
• @zseta made their first contribution in #8932
• @nolanchic made their first contribution in #8854
• @mauricio-porto made their first contribution in #3841
• @Purvi09 made their first contribution in #8899

Full Changelog: v2.7.2...v2.7.3

Changelog

New Features

• OAuth on the AgentOS MCP Endpoint: Added OAuth support for the AgentOS MCP endpoint via AgentOS(mcp_auth=...). See cookbook.
• AG-UI Client Tools: Added client_tools support for AG-UI frontend tools.
• agno connect Enhancements: Multi-target select, disconnect, restart hints, and identity-named entries.

Improvements

• A2A Scope Mappings: Moved A2A scope mappings to the interface and fixed custom prefix support.

Bug Fixes

• Remote Runs (Media): Serialize media for remote agent and team runs.
• FileSystemKnowledge (Security): Prevent path traversal in FileSystemKnowledge.get_file.
• @tool Methods: Toolkit methods decorated with @tool now receive injected run_context, agent, and team parameters.
• Google Calendar Tools: Timezone-aware start_date/end_date are now honored across list_events, create_event, and update_event.

What's Changed

• refactor: move A2A scope mappings to interface, fix custom prefix support by @Mustafa-Esoofally in #8788
• cookbook: update MiniMax M3 cookbook metadata by @octo-patch in #8813
• feat: add client_tools support for AG-UI frontend tools by @Mustafa-Esoofally in #8565
• fix: serialize media for remote agent and team runs by @kausmeows in #8832
• fix: prevent path traversal in FileSystemKnowledge.get_file (#8624) by @ProgrammerPlus1998 in #8726
• feat: agno connect multi-target select, disconnect, restart hints, identity-named entries by @ashpreetbedi in #8797
• feat: OAuth on the AgentOS MCP endpoint via AgentOS(mcp_auth=...) by @ashpreetbedi in #8793
• feat: rename AgentOS enable_mcp_server to mcp_server, fold in mcp_config by @ashpreetbedi in #8812
• fix: inject run_context into @tool-decorated Toolkit methods by @kausmeows in #8830
• fix: normalize calendar list event start dates by @Success6666 in #8700
• chore: Release v2.7.2 by @kausmeows in #8844

New Contributors

• @ProgrammerPlus1998 made their first contribution in #8726

Full Changelog: v2.7.1...v2.7.2

Pre-release for live testing on agentos-railway (agno 2.7.2a2 + agnoctl 0.1.2a2, lockstep).

Over v2.7.2a1

• MCP OAuth hardening: external (Tier-2) tokens with reserved sa:* subjects rejected, refresh-token reuse detection, refined auth_mode reporting, typed mcp_auth: AuthProvider
• Built-in AS store: mcp_oauth table-name overrides in PostgresDb/SqliteDb
• AGENTOS_MCP_SIGNING_KEY honored in the built-in AS example (env-pinned token key)
• from agno.os import * works without the mcp extra again (AgentOSBuiltinAuth left to lazy import)

Pre-release for live testing (agno 2.7.2a1 + agnoctl 0.1.2a1, lockstep).

AgentOS(mcp_server=...) replaces enable_mcp_server + mcp_config (deprecated aliases kept, wire format unchanged)

OAuth on the AgentOS MCP endpoint: AgentOSBuiltinAuth (built-in AS, BaseDb-backed store) + BYO fastmcp AuthProvider (AuthKit), PAT/JWT coexistence via MultiAuth, trust-marker scrubbing for external IdPs

agno connect round 2: multi-target discovery/select, disconnect (URL-guarded removal), identity-named entries, restart hints, OAuth-first registration when /mcp is OAuth-protected

Changelog

New Features:

Service Accounts (PATs): Expose any AgentOS as a Model Context Protocol server and connect it to your coding agent in one command. uvx agno connect mints per-client tokens, writes the MCP config into each client, and verifies the handshake — no manual JSON config editing. Tokens are agno_pat_... machine identities: SHA-256-hashed storage, scoped per-user, revocable via agno tokens revoke, and enforced across every deployment mode.

agnoctl (agno CLI): New CLI distributed as agnoctl on PyPI, invoked as agno. uvx agno connect provisions PATs and wires up coding-agent MCP clients in one command.

agno connect — discover an AgentOS, mint per-client PATs (--name for a shared token), write MCP config for Claude Code, Claude Desktop, Cursor, Codex, and ChatGPT, then verify each connection.

agno tokens create/list/revoke — mint, inventory, and rotate PATs.

agno create — scaffold a new AgentOS project from a template (agentos-<provider>).

agno up/down/restart/status — lifecycle management for local AgentOS deployments.

Eval Suite Runner: New agno.eval package: Case, run_cases, and CLI runner with team subjects and numeric judge scoring.

GET /info Discovery Endpoint: Reports agno_version, mcp: {enabled, path}, and auth_mode so external tooling (e.g. agnoctl) can discover an AgentOS's capabilities before touching it.

Improvements:

MCP Interface v2: New 8-tool operator surface at /mcp: get_agentos_config, run_agent, run_team, run_workflow, continue_run, cancel_run, get_sessions, get_session_runs. Trimmed run results (with result_mode="full" escape hatch), MCP progress notifications for long-running tools, HITL continue/cancel lifecycle.

Single Auth Layer: One AuthMiddleware on the parent app covers REST, /mcp, and WebSocket transports — no more per-transport drift. JWTMiddleware is preserved as an alias for backward compatibility.

Scope Enforcement: check_route_scopes used identically by JWT, service-account, and MCP paths, with a data-driven get_resource_context_from_path (replacing hardcoded substring matches). Every MCP built-in tool maps onto its REST-equivalent route for scope checks.

A2A Authorization: A2A/AGUI routes now enforce authorization alongside authentication; scope-mappings are merged per-interface at the mount prefix so custom prefixes are gated too.

Bug Fixes:

User Isolation for Traces: GET /traces/{trace_id} now enforces per-user ownership (returns 404 on mismatch, matching listing behavior).

A2A Authentication: _add_auth_middleware no longer excludes A2A interface routes — Slack/Telegram/WhatsApp self-authenticate their own inbound requests, but A2A did not and was previously bypassing the single auth layer.

MCP get_agentos_config Db-List Deduping: The reported databases list is now deduplicated across agent/team/workflow db references.

get_db Guard: Now raises a clear 400 "No database is configured on this AgentOS" when no db is registered, instead of raising bare StopIteration.

Breaking Changes:

MCP Surface Shrunk from 19 → 8 Tools: Session-write and memory-CRUD tools are no longer exposed via MCP. MCPServerConfig(include_tags={"memory"}) now fails Pydantic validation. Users who relied on these tools must call REST endpoints instead.

MCP Run Results Trimmed by Default: Clients that consumed the raw RunOutput shape must either handle the new trimmed shape or set result_mode="full" in MCPServerConfig.

AgentOS(authorization=True) Without JWT Keys Fails Fast: Previously this configuration silently served an OPEN instance (JWT and anonymous requests fell through unauthenticated). Now raises ValueError at construction. Set JWT_VERIFICATION_KEY/JWT_JWKS_FILE env vars or pass verification_keys/jwks_file via authorization_config.

AGENTOS_URL Env Var: Renamed from AGNO_OS_URL. Migration: update any environment or CI config that referenced the old name.

What's Changed

• cookbook: Add BGPT MCP cookbook example for evidence-grounded paper search by @connerlambden in #8740
• feat: v2.7 — service accounts, MCP interface v2, agnoctl, and eval suites by @ashpreetbedi in #8747
• release: v2.7.0 by @kausmeows in #8775

New Contributors

• @connerlambden made their first contribution in #8740

Full Changelog: v2.6.22...v2.7.0

Address @kausmeows's PR review of agnoctl:

agno connect flags a rotated token (rotated: true) and prints a reminder to
restart the affected coding agent, which keeps using the previous (now
revoked) token in its live MCP connection until it reconnects.

Autodiscovery probes 7778 and 7779 in addition to 7777 and 8000, so an
AgentOS on a bumped port (7777 taken) is found instead of silently missed;
any other port still needs --url / AGENTOS_URL, which the not-found error names.

Co-Authored-By: Claude Opus 4.8 [email protected]