What's new
Recent updates to relay-mcp — new features and notable fixes.
Groups — 2026-07-24
New
- New Groups page (Administration → Groups): collect people into a group once, then grant them permission sets and share reports & dashboards in one place — instead of setting access person-by-person.
- Members inherit the group's permission sets live, and a group can be given access to specific dashboards or exports.
- Membership is managed by hand and can optionally mirror a Microsoft Entra group, so the right people are included automatically when they sign in with Microsoft.
- A “Verify name” button next to every Entra-group field (Groups, delivery destinations, and Microsoft sign-in) checks the name against Microsoft live — so a typo can’t silently lock people out.
A clearer Help section — 2026-07-24
New
- Reworked Help: one hub of short, focused how-to articles — connecting Claude or ChatGPT, installing agents, integrations, reporting & dashboards, and administration — now available to everyone who signs in, not just admins.
- Little “i” help links next to the relevant screens jump straight to the matching article.
- Dashboards load faster: the page is cached and only rebuilt when its data or layout changes.
Report delivery, ownership & alerts — 2026-07-23
New
- Delivery destinations: one place to say where a report or dashboard is served or uploaded (SFTP, WebDAV or SMB) — with a shared access policy, so a single login or IP allowlist can open many files.
- Pick exactly who can open each export or dashboard with simple checkboxes: public, an IP allowlist, a username + password, or signed-in users of your organisation (optionally limited to a Microsoft Entra group).
- Ownership you can transfer: reports, scheduled exports, dashboards and agents each have an owner an admin can reassign.
- Optional email alerts when one of your exports, dashboards or agents has a problem — immediately, or as one daily morning summary.
- Link two relay servers together so one can securely use the other's integrations (superadmin).
Dashboards, cross-system reports & easy connectors — 2026-07-22
New
- Cross-integration reports: join data from several systems — e.g. Salesforce pipeline vs. SAP backlog — into one shareable, scheduled report.
- Live HTML dashboards built from your saved reports and served by the relay.
- Permission sets: named, reusable bundles of access you can assign to people instead of ticking boxes each time.
- Connect Claude and ChatGPT with a per-person sign-in (OAuth) — separate read and write toggles, and one-click disconnect.
- New integration: n8n workflow automation.
- New Administration → Security page, with IP access controls for the admin console and the AI endpoint.
Sign in with Microsoft + Salesforce — 2026-07-21
New
- Single sign-on: users can sign in with their Microsoft (Entra) account. Mix Microsoft sign-in and local password + two-factor per person, optionally gated to a Microsoft group.
- New Salesforce integration: query and update (SOQL) as each signed-in user or a shared account, with saved shareable reports and Power BI exports.
Per-person Microsoft access — 2026-07-20
New
- Microsoft Entra / Graph can now act as each signed-in user, so everyone works with their own permissions rather than a single shared identity.
Fixes
- Reliability and security fixes, including keeping long-running Windows agents connected.
Faster SAP setup & Jira / Confluence — 2026-07-19
New
- SAP HANA quick setup: tick business-area module packs (Financials, Sales, Inventory, …) or auto-discover and classify the tables a user may query — no more hand-typing patterns.
- Atlassian Jira & Confluence: read and write as each signed-in user, plus organisation admin tools.
Fixes
- Security hardening of the SAP query guard and several smaller fixes, following an external code review.
Reporting, data scoping & support tooling — 2026-07-18
New
- Reporting server: turn saved SAP reports into scheduled CSV exports that Power BI, Excel or any BI tool can pull directly over HTTPS, each with its own access credentials.
- Query categories for SAP: limit which tables a user may query, grouped by business area.
- Opt-in remote debugging: temporarily let support connect to help diagnose a problem (off by default, time-limited).
- A reporting server can now run on the same host as the main server, and installs/uninstalls independently.
- A "What's new" page on the site so you can see recent updates at a glance.
Fixes
- Reliability, connectivity and installer fixes across reporting and integrations.
- Security hardening of report and integration permissions, following an external code review — tighter checks on who can author reports, how many rows shared reports return, and where stored integration credentials may be sent.
SAP report maker & user-scoped integrations — 2026-07-17
New
- Report maker: build reusable, parameterized read-only SAP reports and share specific reports with the people who need them.
- Microsoft Entra / Graph and the new Jira & Confluence integration can now act as the signed-in user — each person works with their own access.
- Per-integration help pages so each integration explains how to set it up and what it can do.
SAP HANA, SharePoint & themes — 2026-07-16
New
- New SAP HANA integration: read-only reporting over a secure in-network tunnel, including SAP CDS views.
- SharePoint access with a curated allowlist (scope it to specific sites or folders) as part of the Microsoft integration.
- Selectable colour themes for the whole interface (Global Settings → Appearance).
On-prem Windows management & one-command install — 2026-07-15
New
- Unified Windows Active Directory & Group Policy integration: manage users, groups and GPOs through a Windows agent.
- One-command standalone server installer for Debian/Ubuntu, plus copy-paste update & uninstall commands per agent.
- Proxmox: create and remove containers.
- Owner and installer roles with a central main-server hub for larger setups.
Fixes
- Installer, agent update/uninstall and integration-routing fixes.
More integrations & abuse protection — 2026-07-14
New
- New integrations: NGINX Proxy Manager, on-prem Active Directory, and Group Policy.
- Automated brute-force IP blocking, via NGINX Proxy Manager or an on-host firewall.
- Clearer setup errors: missing prerequisites now include a copy-paste install command.
Fixes
- Fixes to integration add/edit/refresh and IP-block ordering.
Connect any API + editable access — 2026-07-13
New
- Generic REST (OpenAPI) and GraphQL integrations — connect virtually any HTTP API.
- Edit an AI token's or connection's access at any time from My Tokens.
- First-use email alert the first time each token or connector is used — an early warning if one leaks.
Accounts, sign-in security & first integrations — 2026-07-12
New
- First integrations: Google Workspace, MikroTik, Darktrace and Palo Alto.
- Passkeys (WebAuthn), mandatory two-factor sign-in, forgot-password, and self-service accounts.
- Connect from Claude's built-in "Add custom connector" (OAuth), with a consent-time scope picker.
- New admin System dashboard, public Terms & Privacy pages, and a high-contrast theme.
The foundation — 2026-07-10
New
- Multi-tenant workspaces, self-registration, and sign-in by email.
- Dial-out agents that connect out over a secure channel — no inbound ports, works behind NAT and firewalls.
- Fine-grained, per-capability access control over exactly what each AI token may do.
- Ephemeral "portable" clients you can start on any machine via an email-confirmed token.