What's new.
Every change to Toolrails, newest first. Breaking changes are always marked and announced two weeks ahead.
2026.09.22
new
Free plan: unlimited calls, 3 apps
Free no longer has a monthly call limit. Instead it includes 3 connected apps, so your agent is never cut off halfway through a task.
- Connecting a fourth app asks you to swap one out or upgrade.
- Existing Free accounts keep every app they have until 1 Nov.
2026.09.15
new
Team seats cost $0
Team is now one flat price. Invite as many people as you need, each with the owner, admin or member role.
- Removing someone can also revoke the API keys they created.
- Keys now belong to the workspace, not a person.
2026.09.04
improved
Search finds steps that must run first
search_tools now returns the actions a match depends on, by name only, so they cost almost no tokens.
- recall@5 on the public test set went from 91.8% to 95.4%.
2026.08.27
newsafety
Split-attack detection
The injection guard now looks across several outside messages in one chat, catching attacks spread over an email, a ticket and a note.
- On by default in Thorough mode.
- Available in @toolrails/injection-guard v0.2.0.
2026.08.12
fixed
Stripe logins refresh reliably
Some Stripe connections expired early and returned 401. Logins now refresh ahead of time, and the connect link is sent if a refresh fails.
2026.07.30
breaking
fields is now an array
execute_tool used to accept fields as a comma-separated string. It now takes an array. Strings keep working until 30 Sep with a warning in the response.
- Before: "fields": "id,url"
- After: "fields": ["id", "url"]
Open-source package releases are listed on GitHub, and there's an RSS feed at toolrails.com/changelog.xml.