Agent Canvas 1.19.0
Released September 16, 2026. View the full release on GitHub.Highlights
- MCP server scoping for agent profiles — Agent profiles can now be scoped to specific MCP servers using
mcp_server_refs. When a profile is scoped, only the selected MCP servers’ tools are available to the agent in that conversation. See Agent Profiles. - Automation disablement reasons — The automation detail page now shows a human-readable disablement reason with structured detail and a timestamp. This makes it easy to understand why an automation was disabled, whether manually or due to a permanent dispatch failure. See Managing automations.
- GPT-6 Astra model support — The Codex ACP model picker includes GPT-6 Astra. ACP agent model lists are sourced from the SDK registry, so no additional configuration is required. See ACP Agents.
Improvements and Fixes
- Azure DevOps SSH remote URLs (
git@ssh.dev.azure.com:v3/...) are now correctly parsed, so repositories cloned over SSH display the correct name and branch. - The static server now HTML-escapes injected runtime configuration and sets
Cache-Control: no-store, fixing an XSS vulnerability. - The client ACP registry pin is now tied to the agent-server, ensuring ACP provider lists stay in sync.
- The automation bundle-source validator now accepts
plugins/package directories in catalog bundles. - SDK bumped to 1.48.0 and automation runtime bumped to 1.12.1.