# Everruns 0.49.0: Thousands of MCP tools, GitHub sync and a Helm chart > MCP servers with 2,000+ tools and MCP Tasks, Agent source synced with GitHub, scoped credentials, Knowledge, and a Helm chart with everruns docker up. Source: Date: 2026-10-26 Products: Platform, Framework, CLI Category: Release ![Everruns 0.49.0 release card with the version number and its highlights](https://everruns.com/docs/_astro/card@2x.CNACGjkz_2f2COb.webp) ## Highlights * **Thousands of MCP tools and MCP Tasks**: Agents work with MCP servers of 2,000+ tools: catalogs load across pages, tools are found by search and their schemas revealed within a fixed budget, through native calls, the CLI or both. Agents also accept MCP Tasks, checking on long tool calls until they finish instead of hitting the request timeout, and each MCP server can set its own tool call timeout ([changelog](https://everruns.com/docs/changelog/2026-10-21-large-mcp-catalogs/), [MCP Tasks changelog](https://everruns.com/docs/changelog/2026-10-23-mcp-tasks-client/), [#4870](https://github.com/everruns/everruns/pull/4870), [#4882](https://github.com/everruns/everruns/pull/4882), [#4887](https://github.com/everruns/everruns/pull/4887), [#4888](https://github.com/everruns/everruns/pull/4888), [#4889](https://github.com/everruns/everruns/pull/4889)). * **Agent source synced with GitHub**: An Agent’s source syncs continuously from a GitHub repository, and in two-way mode edits made in Everruns are committed back to the branch ([changelog](https://everruns.com/docs/changelog/2026-10-25-two-way-agent-github-sync/), [#4869](https://github.com/everruns/everruns/pull/4869), [#4919](https://github.com/everruns/everruns/pull/4919)). * **Scoped credentials**: Write-only credentials bind to a user, agent, session or organization, agents get explicit access, and API tokens are captured with consent for the exact request ([changelog](https://everruns.com/docs/changelog/2026-10-19-scoped-credentials-secure-capture/), [#4828](https://github.com/everruns/everruns/pull/4828)). * **Knowledge**: Notes, source trees and binary originals mount through one Knowledge feature, with text extraction and optional keyword or hybrid search ([changelog](https://everruns.com/docs/changelog/2026-10-23-unified-knowledge-files/), [#4886](https://github.com/everruns/everruns/pull/4886), [#4893](https://github.com/everruns/everruns/pull/4893), [#4894](https://github.com/everruns/everruns/pull/4894), [#4900](https://github.com/everruns/everruns/pull/4900)). * **Automatic session titles**: Sessions get titles automatically from a dedicated small model, and titles set by hand are kept ([changelog](https://everruns.com/docs/changelog/2026-10-17-automatic-session-titles/), [#4802](https://github.com/everruns/everruns/pull/4802)). * **Helm chart and `everruns docker up`**: `everruns docker up` runs the self-hosted Platform on your machine with Docker in one command and asks how people sign in; `upgrade`, `reset`, `status`, `logs` and `doctor` manage it. A Helm chart published to `oci://ghcr.io/everruns/charts/everruns` installs the Platform on Kubernetes ([changelog](https://everruns.com/docs/changelog/2026-10-25-everruns-docker-up/), [Helm changelog](https://everruns.com/docs/changelog/2026-10-25-helm-chart/), [#4895](https://github.com/everruns/everruns/pull/4895), [#4904](https://github.com/everruns/everruns/pull/4904), [#4906](https://github.com/everruns/everruns/pull/4906), [#4910](https://github.com/everruns/everruns/pull/4910)). * **Sandbox network policy on Daytona and E2B**: Daytona and E2B Sandbox Templates can block the network or allow only listed domains, enforced by the provider together with the session’s network access list ([changelog](https://everruns.com/docs/changelog/2026-10-25-daytona-network-rules/), [#4913](https://github.com/everruns/everruns/pull/4913), [#4914](https://github.com/everruns/everruns/pull/4914)). ## Upgrade notes * Session secrets are write-only to agents: `secret_store` sets, lists and deletes, but `get` no longer returns a value ([#4676](https://github.com/everruns/everruns/pull/4676)). * Development mode (`DEV_MODE=true`) refuses to run as root; run it as a regular user or use external PostgreSQL ([#4722](https://github.com/everruns/everruns/pull/4722)). * The experimental Deno Deploy sandbox provider and its `deno_*` tools are removed; use Daytona, E2B, Sprites, Modal or the container sandbox ([#4769](https://github.com/everruns/everruns/pull/4769)). ## In the changelog * [Agents can no longer read secrets back](https://everruns.com/docs/changelog/2026-10-13-agents-cannot-read-secrets/) * [Answers cut off by a provider error are retried](https://everruns.com/docs/changelog/2026-10-13-answers-cut-off-are-retried/) * [Stored attachments download safely in browsers](https://everruns.com/docs/changelog/2026-10-13-attachments-download-safely/) * [Attachments stay readable after compaction, from every channel](https://everruns.com/docs/changelog/2026-10-13-attachments-survive-compaction/) * [Dev mode PostgreSQL requires a non-root user](https://everruns.com/docs/changelog/2026-10-13-dev-mode-postgres-user/) * [E2B desktop computer use keeps the pointer where it was moved](https://everruns.com/docs/changelog/2026-10-13-e2b-desktop-pointer-reset/) * [Gemini 4 Argon continues long responses across requests](https://everruns.com/docs/changelog/2026-10-13-gemini-argon-long-decode/) * [MCP resource reads enforce conversation attachments](https://everruns.com/docs/changelog/2026-10-13-mcp-resource-attachment-scope/) * [Remote workers run turns without an encryption key on the API](https://everruns.com/docs/changelog/2026-10-13-remote-workers-without-encryption-key/) * [Tool calls cut off by a crash are rerun when it is safe](https://everruns.com/docs/changelog/2026-10-13-tool-calls-survive-crashes/) * [Schedule triggers read cron weekdays from Sunday as 0](https://everruns.com/docs/changelog/2026-10-13-trigger-cron-weekdays-from-sunday/) * [Visti and Stend join the product footer](https://everruns.com/docs/changelog/2026-10-13-visti-stend-footer-links/) * [Monitor agent execution and actor leases at fleet scale](https://everruns.com/docs/changelog/2026-10-14-agent-execution-monitoring/) * [Concurrent session creation reuses one runtime account](https://everruns.com/docs/changelog/2026-10-14-concurrent-session-account-creation/) * [Framework and serve keep files in the session](https://everruns.com/docs/changelog/2026-10-14-framework-serve-attachments/) * [Gemini setups prefer Argon and include it in favourites](https://everruns.com/docs/changelog/2026-10-14-gemini-argon-default/) * [More reliable Framework agent sessions](https://everruns.com/docs/changelog/2026-10-14-local-session-reliability/) * [Local stress tests use successful offline tool workloads](https://everruns.com/docs/changelog/2026-10-14-local-stress-testing/) * [OpenTelemetry fixes export and cached-token totals](https://everruns.com/docs/changelog/2026-10-14-opentelemetry-export-and-accounting/) * [PACT delegated turns discover the user’s MCP tools](https://everruns.com/docs/changelog/2026-10-14-pact-delegated-mcp-tools/) * [Recurring schedules reject unverified cron intervals](https://everruns.com/docs/changelog/2026-10-14-session-cron-interval-validation/) * [A Slack integration overview for building Agents](https://everruns.com/docs/changelog/2026-10-14-slack-integration-overview/) * [Tool events expose scoped worker CPU observations](https://everruns.com/docs/changelog/2026-10-14-tool-worker-cpu-observations/) * [React session streams can suspend while idle](https://everruns.com/docs/changelog/2026-10-15-optional-idle-session-streams/) * [Find failed agent turns from the Agents list](https://everruns.com/docs/changelog/2026-10-16-agent-failure-investigation/) * [Agent session lists now match their session count](https://everruns.com/docs/changelog/2026-10-16-agent-session-history/) * [Connect your coding agent from the Everruns UI](https://everruns.com/docs/changelog/2026-10-16-coding-agent-onboarding/) * [Everruns shares product and workflow skills](https://everruns.com/docs/changelog/2026-10-16-platform-operating-skills/) * [Deno Deploy sandbox integration removed](https://everruns.com/docs/changelog/2026-10-16-remove-deno-deploy/) * [Slack workspace consent stays with its initiating browser](https://everruns.com/docs/changelog/2026-10-16-slack-workspace-browser-binding/) * [User MCP management respects approval settings](https://everruns.com/docs/changelog/2026-10-16-user-mcp-approval-policy/) * [Run Everruns provider drivers with WASM host fetch](https://everruns.com/docs/changelog/2026-10-16-wasm-provider-host-fetch/) * [Automatic session titles with a shared small model](https://everruns.com/docs/changelog/2026-10-17-automatic-session-titles/) * [ChatGPT Plan removed from Platform setup](https://everruns.com/docs/changelog/2026-10-17-chatgpt-plan-ui-removal/) * [Framework hosts can brand ChatGPT login completion](https://everruns.com/docs/changelog/2026-10-17-custom-chatgpt-login-pages/) * [OAuth MCP servers with path-specific metadata now connect](https://everruns.com/docs/changelog/2026-10-17-mcp-oauth-discovery-fallbacks/) * [Connecting GitHub as yourself acts as you, not the shared bot](https://everruns.com/docs/changelog/2026-10-18-github-person-sign-in/) * [MCP client authorization follows callback redirects](https://everruns.com/docs/changelog/2026-10-18-mcp-client-authorization-redirects/) * [Turns no longer fail when a provider asks to wait too long](https://everruns.com/docs/changelog/2026-10-18-provider-retry-after-budget/) * [Schedule triggers can run in a Slack conversation](https://everruns.com/docs/changelog/2026-10-18-schedule-triggers-in-slack-conversations/) * [Sessions no longer hang when a worker stalls before a turn](https://everruns.com/docs/changelog/2026-10-18-stalled-worker-sessions-recover/) * [Tenant egress proxy for self-hosted deployments](https://everruns.com/docs/changelog/2026-10-18-tenant-egress-proxy/) * [Bring host capabilities and providers into Engine sessions](https://everruns.com/docs/changelog/2026-10-19-engine-host-services/) * [Run commands and hot-install capabilities on live sessions](https://everruns.com/docs/changelog/2026-10-19-engine-session-controls/) * [Gemini citations survive every continuation hop](https://everruns.com/docs/changelog/2026-10-19-gemini-continuation-grounding/) * [Harness capabilities keep their name and details](https://everruns.com/docs/changelog/2026-10-19-harness-capability-metadata/) * [Credentials work across users, agents and sessions](https://everruns.com/docs/changelog/2026-10-19-scoped-credentials-secure-capture/) * [Send host-written review completions on Framework sessions](https://everruns.com/docs/changelog/2026-10-19-session-curated-completions/) * [Large MCP catalogs use bounded search and schemas](https://everruns.com/docs/changelog/2026-10-21-large-mcp-catalogs/) * [Chat mode keeps Agent edits beside the conversation](https://everruns.com/docs/changelog/2026-10-23-chat-beside-agent-pages/) * [Agents wait on MCP servers that run tools as tasks](https://everruns.com/docs/changelog/2026-10-23-mcp-tasks-client/) * [MCP Tasks run one agent turn per task](https://everruns.com/docs/changelog/2026-10-23-mcp-tasks-per-turn/) * [MCP tool calls can run longer than 60 seconds](https://everruns.com/docs/changelog/2026-10-23-mcp-tool-timeout/) * [Sync Agent source continuously from GitHub](https://everruns.com/docs/changelog/2026-10-23-sync-agent-source-github/) * [Knowledge unifies files and optional indexed search](https://everruns.com/docs/changelog/2026-10-23-unified-knowledge-files/) * [Agent actions and searchable Playground setup](https://everruns.com/docs/changelog/2026-10-24-agent-actions-playground-search/) * [Publish a dedicated Work Chat for an Agent](https://everruns.com/docs/changelog/2026-10-24-hosted-work-chat/) * [Work reports show what an agent is doing and got done](https://everruns.com/docs/changelog/2026-10-24-work-reports/) * [Limit outbound network for Daytona and E2B sandboxes](https://everruns.com/docs/changelog/2026-10-25-daytona-network-rules/) * [Run Everruns on your machine with one command](https://everruns.com/docs/changelog/2026-10-25-everruns-docker-up/) * [Install the self-hosted Platform on Kubernetes with Helm](https://everruns.com/docs/changelog/2026-10-25-helm-chart/) * [Live event delivery recovers after a NATS restart](https://everruns.com/docs/changelog/2026-10-25-nats-stream-recovery/) * [Bashkit Python builds on Windows again](https://everruns.com/docs/changelog/2026-10-25-bashkit-windows-python/) * [Chat folds a thread report into one line](https://everruns.com/docs/changelog/2026-10-25-folded-thread-reports/) * [Give a Daytona or E2B sandbox a desktop](https://everruns.com/docs/changelog/2026-10-25-sandbox-desktop/) * [Agents see the screenshots and images their tools return](https://everruns.com/docs/changelog/2026-10-26-tool-images-reach-model/) * [Sandboxes are disposable, their records are kept](https://everruns.com/docs/changelog/2026-10-25-sandbox-retention/) * [Edit GitHub-synced Agents from either side](https://everruns.com/docs/changelog/2026-10-25-two-way-agent-github-sync/) See the [GitHub release](https://github.com/everruns/everruns/releases/tag/v0.49.0) and the [full release notes](https://github.com/everruns/everruns/blob/main/CHANGELOG.md#0490---2026-10-26) for every pull request in this version.