> ## Documentation Index
> Fetch the complete documentation index at: https://docs.switchagents.ai/llms.txt
> Use this file to discover all available pages before exploring further.
> ## Agent Instructions
> These docs moved from docs.flintai.dev to docs.switchagents.ai. Use docs.switchagents.ai for every link and request.
> To search these docs from an AI tool, connect the MCP server at https://docs.switchagents.ai/mcp. The page index is at https://docs.switchagents.ai/llms.txt.
# Switch Trust changelog
> What's new in Switch Trust
Release notes for Switch Trust.
**Added:**
* **AWS and GCP as data sources** - Connect an AWS account or a Google Cloud project in **Settings > Data sources** and scan it for the AI resources deployed there, alongside your GitHub and GitLab repositories. Switch Trust connects read-only, through an assumed IAM role for AWS and Workload Identity Federation for GCP, so there are no long-lived keys to store
**Changed:**
* **Long text stays readable in detail panels** - A detail panel expands long text in place instead of cutting it off, so you can read the whole value without it being truncated
**Security:**
* **Platform hardening** - Internal-only service endpoints are separated onto a mesh-internal port so they are not reachable from outside the platform network
**Changed:**
* **Clearer required fields when creating a guardrail policy** - The policy form marks which fields are required before you can create a policy, and when topic control is enabled it requires the agent objective and guidelines so the detector has something to work with
**Fixed:**
* **Inventory lists page reliably** - Paging through an inventory list no longer shows the same row twice or skips one, so what you see across pages is complete and stable
* **Prompts and responses display reliably** - Prompt and response text is captured and retrieved correctly, so it shows up where you expect instead of coming back empty
**Added:**
* **See which agents are managed** - The agents list flags which agents are managed and shows the count, so you can tell at a glance what is under management
* **Failed LLM interactions show as errors** - An interaction that errors is now surfaced as an error instead of appearing empty, so a failed call is visible where the interaction is
**Security:**
* **Tool-result redaction now covers Anthropic** - Guardrails redact PII and secrets in the tool results an agent receives on Anthropic, extending the coverage already in place for OpenAI and Gemini
**Added:**
* **Sort agents and inventory by issue count** - The agents table and the inventory tables sort by number of issues, so whatever needs attention rises to the top
* **See where each tool came from** - Every tool in your inventory records the source it was discovered from, shown as a filterable column in the tools table. Sources are derived from your agents' real interactions during analysis and refresh when a repository is scanned again
* **Build policy tool lists from your inventory** - When you set a guardrail policy's tool allow or block list, pick from the tools already discovered in your inventory instead of typing names by hand
* **Assign and manage member roles** - Choose a member's role when you invite them, change a member's role afterward, and see the role attached to each API key. The interface shows only the actions your own permissions allow
**Fixed:**
* **Invitations land you in the right organization** - Accepting an invitation moves you into the organization that invited you
**Security:**
* **Tool-result redaction now covers Gemini** - Guardrails redact PII and secrets in the tool results an agent receives on Gemini, matching the coverage already in place for OpenAI
**Added:**
* **See what a tool can do** - Tools in your inventory carry capability tags such as network access, filesystem writes, and shell execution, shown in the tools table and on each tool's detail panel. Each capability records how it was determined, so a resolved call site is distinguishable from a match against a catalog of known tools. Tags fill in as your repositories are scanned again
* **Cached tokens are priced separately** - Cost now prices cached tokens apart from fresh ones, so prompt caching shows up as the saving it is instead of disappearing into the input count. Session and turn views break out cache hits and cache stores, and you can set your own cache read and write rates alongside input and output on the **Model pricing** page
* **Resend a pending invitation** - Through the API, admins can send the email for a pending invitation again instead of revoking it and starting over. An expired, accepted, or revoked invitation still has to be recreated
**Changed:**
* **Input token counts exclude cached reads** - OpenAI and Gemini report cached tokens inside the input count. Those are now subtracted and reported on their own, so input figures for agents on those providers read lower than before. Activity already recorded keeps the counts it was stored with
**Fixed:**
* **Account setup no longer needs admin permissions** - Accepting the license agreement and completing the qualification step are open to every member, so people who are not admins can finish setting up their account
* **Platform reliability** - Guardrail services start reliably after a cold start, and requests are handled consistently across model providers
**Security:**
* **Role changes respect the hierarchy** - Nobody can grant a role above their own or act on a member ranked above them, and an organization can never be left without an admin. A blocked attempt returns the reason
* **Platform hardening** - Tightened the runtime configuration of guardrail services and widened vulnerability scanning of platform images
**Added:**
* **Switch between organizations** - If you belong to more than one organization, **Switch organization** in the account menu moves you between them without signing out
* **Admin view of every API key in your organization** - Through the API, admins can list all keys in the organization, personal and organization-owned, see who owns each one, and revoke any of them
* **List the agents Switch Trust is tracking** - A new endpoint returns the agents that have sent guardrail traffic or finished an evaluation, with the date each was first seen. The list is cumulative, so an agent stays on it after it goes quiet
* **Cost for the latest Claude and GPT-5 models** - Default pricing adds four current Claude models and the GPT-5 mini and nano tiers. Cost is calculated when you view it, so spend already recorded against these models appears too, not only new activity
**Changed:**
* **GitHub and GitLab are reported separately** - Inventory records which platform each agent was found on, so results from the two can be told apart. Existing GitHub results are unchanged, and the new value appears once your scanner is updated
**Added:**
* **GitLab as a data source** - Connect GitLab in **Settings > Data sources** and scan its repositories for agents, alongside GitHub
* **Sessions on the agent detail page** - The **Sessions** tab groups an agent's activity into sessions, and a detail panel breaks each session down turn by turn
* **Event detail inside a turn** - Open a turn in **Live** or on an agent to see the events it contains, including tool calls and the content tools returned
* **Interactive asset graph** - The graph on an agent's **Overview** and **Assets** tabs expands to show what the agent connects to, and opens fullscreen
**Changed:**
* **Readable large numbers** - Token counts and costs are abbreviated in tables and charts, so long numbers no longer stretch a column
* **Consistent model health score** - The score reads the same way in the models table and in the model detail panel
* **Detail panels close from the main view** - Selecting the main content closes an open detail panel
**Fixed:**
* **Tool results in Live events** - Tool result content displays instead of appearing empty
* **Asset table dates** - Last seen and created dates display correctly in the models, MCP servers, and tools tables
**Security:**
* **API keys are revoked when a member leaves** - Removing someone from your organization now revokes the API keys they created, so access ends with the membership
* **API keys inherit the role of whoever creates them** - A new key takes the creator's role and can no longer be issued with a higher one
* **Blocked content is stored redacted** - When a guardrail blocks a message, the retained record no longer holds the original content
* **Tool results are covered by redaction** - Guardrails read the tool results an agent receives, so redaction applies to that content too
**Added:**
* **Cost tracking for agents** - Agent detail pages chart cost by month, cost per session, and burn rate, and the agent table adds Cost (MTD), \$/session, and Cap usage columns
* **Agent spend caps** - Set a monthly spend cap on an agent, with a cap-aware burn rate and a days-to-cap forecast, so teams can track and manage agent spend
* **Cost data page** - Spend and per-model pricing in one place
**Changed:**
* **Automatic re-authentication** - Sessions prompt a new sign-in when authentication expires, keeping access secure
**Fixed:**
* **Platform reliability** - Service availability, update handling, and API request validation improved across the platform
**Security:**
* **Platform hardening** - Tightened service security configuration and updated dependencies
**Added:**
* **Organization member removal** - Remove a member from your organization in the interface or through the API
* **Identity lookup from API keys** - A new endpoint returns the identity behind an API key, so you can attribute activity in your own logging and workflows
* **API reference** - Platform endpoints are documented in the [API reference](/switch-trust/api-reference/index)
**Changed:**
* **Guardrail coverage stays in place** - An organization always keeps at least one active policy
* **Guardrails availability during updates** - Guardrails keep evaluating while the platform updates
**Fixed:**
* **Guardrails under concurrent load** - Detectors evaluate reliably when many requests arrive at once
* **Connected assets on the agent detail page** - Connected assets now display consistently
* **Gemini requests without a role field** - Improved compatibility for requests that omit a role
* **Inventory finding severity** - Inventory findings display with their intended informational severity
* **Organization creation** - Creating an organization produces a single organization, even if the request is retried
* **Invitations for existing members** - Inviting someone who already belongs to the organization returns a clear conflict response
Initial early access release.
**Added:**
* **Sign-in and organization setup** - Sign in with GitHub, Google, or email, then create organizations and workspaces, invite teammates, and issue organization-scoped API keys
* **GitHub-based agent discovery** - Find the agents in your repositories with a GitHub Action. See [Discover your agents](/switch-trust/getting-started/discover)
* **Central agent inventory** - See the models, prompts, tools, MCP servers, and sub-agents behind every agent in one place
* **LLM-based scanning** - Scan agent code and MCP servers for issues
* **Guardrails onboarding through the Switch Trust Python SDK** - Connect running agents to the guardrails proxy. See [Monitor and protect your agents](/switch-trust/getting-started/runtime)
* **Policy-based guardrails** - Detectors for jailbreaks, toxicity, PII, secrets, PHI, and custom regular expressions, plus tool allow and block lists
* **Configurable enforcement actions** - Block, redact, or alert when a policy matches