Every shipped feature is dated.

Releases, newest first.

• 2026-09-27GA · Web
  Individual plans are now billed monthlyBasic, Pro, Max 5x and Max 20x are sold with monthly billing only; Team keeps its yearly option.Existing yearly Pro subscriptions keep their price and keep renewing yearly.
• 2026-09-20GA · Web
  Deletion, holds and connector revocation · correctedA legal hold now outlives every deletion window it covers, including the one that retires a temporary chat, and the sweeps that hard-delete a held store refuse to run without the hold predicate.Disconnecting a connector now asks the provider to revoke every account you connected through it, not only the one treated as the default, and still clears that connector’s saved approval verdicts.A deleted message can no longer return to a model: a fork drops it, and a compaction summary is rebuilt whenever the span it covered changed.Memory switched off is honoured on every write path, and the developer API documents the error body of every published operation.
• 2026-09-15Not yet released: Desktop
  Desktop · one desktop appThe macOS app built on Electron is the AGI desktop application: your managed-cloud account in a window that stays open, approved folders, computer use one step at a time, and the Chrome bridge. Its release workflow signs, notarizes and verifies one installer per architecture; no installer has been published yet.The earlier Tauri build leaves the public download flows, and its Linux packages are no longer offered.
• 2026-09-05GA · Web
  Model catalogue, route health and the operator console · liveWeb: a model catalogue behind the composer with favourites, a Recommended short list, plan admission derived from the billing catalogue, and the model that answered a reply named in that reply's actions menu.Routing: Auto now tracks provider, credential and capability health separately, rotates away from an unfunded provider account once, and tells you when a pinned model cannot be served.Operations: an operator console with feedback triage, user operations, attributed cost, routing health, takedowns and data-rights requests, every action with a reason and an audit row.
• 2026-07-31GA · Web · Not yet released: CLI, Desktop
  Agent tooling and platform maturityCLI: configurable keybindings, live NDJSON event streaming, named-agent runs, session search by pull request, managed-gateway model discovery.Desktop prototype at the time: MCP registry work alongside menu bar residency and renderer IPC isolation. Local MCP did not carry into the public Electron Desktop selected on 15 September.Web: centralized approval inbox, live admin security console, virtualized chat transcript, account session management.
• 2026-07-03Not yet released: CLI
  CLI local model providersThe CLI now talks to Ollama and LM Studio as local, self-hosted model providers, alongside its BYOK provider set. Desktop remains an AGI managed-cloud account shell.
• 2026-06-24GA · Web · Not yet released: CLI
  Local, BYOK, and cloud trust boundaryFail-closed egress separation enforced by each implemented route: CLI local mode makes no network call to us, BYOK traffic goes straight to the provider you configured, and managed cloud is metered against your plan.Canonical security policy published on our security page, naming the trust-boundary model and its known gaps.
• 2026-05-08GA · Web
  Marketing site redesign · liveSite-wide redesign on the new dark theme. Same surface across every marketing route.It shipped with a single typeface (Geist Sans), a 12-spoke brand mark and a single amber accent.No version numbers, no model IDs, no vanity counts in marketing copy. /changelog is the explicit exception.
• 2026-05-04Not yet released: CLI
  OpenClaw porting · completeProvider adapter interface stable. Anthropic, OpenAI, Ollama, Google adapters landed.MCP transport and skills loader landed. Hook events parity in the Rust CLI. A cross-provider demo ran through the API gateway.
• 2026-05-03Not yet released: CLI
  CLI v1.0Pure Rust binary on five platforms, published as five archives on a GitHub release this repository no longer holds. Neither install route worked against it: the Homebrew tap repository is private, and install.sh refused to install without the signed checksum manifest that release did not carry.Cleanup pass: removed ~70 codex-rs port crates and a large net of dead code. Audit closed most P0/P1 items.
• 2026-02 to 2026-05Not yet released: Desktop
  Desktop · early releasesTauri + React desktop, with the release signing and installer publishing pipeline aligned to the public release path. No signed installer was published from it: its newest release carried .AppImage, .deb and .rpm assets and no signature.Public download links were gated on verified GitHub release assets or configured signed-asset URLs.

• 2026-10-08
  Terms of service updatedThe date moves to 2026-10-08, the public launch day. Corrects three statements without changing your rights or obligations. The CLI is no longer described as released, and the terms say it keeps provider keys in owner-only files on Linux or when the keyring is turned off. Deleting an account still sends no confirmation email; the terms no longer say that is because the product sends no account email, which was not true. The appeal route for a suspended account is in section 04 of the acceptable use policy, not section 05. The age rule changes: you must be at least 13 to create an account, and if you are under 18 you need permission from a parent or guardian, who accepts the terms on your behalf. It used to require an account holder to be 18, with younger users only under a supervised account. Sign-up asks for your age and refuses anyone under 13; we do not verify the age or the permission, and the age is not kept. Four additions. You need our written permission to use our names and logos, and may not use them to suggest we endorse you. While a subscription payment is overdue, paid features are switched off and the account runs with the Free plan’s limits; there is no grace period, and a failed payment does not delete your content. The sanctions section now names the United States Office of Foreign Assets Control. A material change to these terms takes effect no sooner than 30 days after it is posted. Also states that on the Free plan a chat on the default model goes to a provider AGI chooses, not one you pick: Alibaba Cloud Model Studio, at its international endpoint in Singapore, or OpenRouter’s free router, depending on what is available for that turn. Section 13 now says you may not use AGI from a country or region where it is not offered, or use a VPN or other means to get around that, and that an organisation based in or controlled from one of those places may not use it from anywhere. The supported countries page lists those places.
• 2026-10-08
  Privacy policy updatedAdds an optional marketing email choice, asked in a separate unticked box and withdrawable in Settings or on the data rights page; no marketing email is sent yet. Corrects where files are stored: new uploads and generated files are written to a private bucket, while profile pictures and files stored before that move can be opened by anyone who has their address, and a data export is downloaded through a short-lived link. MiniMax models receive nothing from Managed Cloud and are reachable only with your own key; Qwen and Zhipu requests go through OpenRouter unless AGI holds its own key for that provider. Says how a notice about an incident would reach you. Removes a statement that only three things in the product can send email, which was not true, and says the CLI keeps provider keys in owner-only files on Linux or when the keyring is turned off. The age rule changes: you must be at least 13 to create an account, and anyone under 18 needs permission from a parent or guardian. Sign-up asks for your age; it is checked in your browser and is not stored or sent to us or to our identity provider, and we do not verify it.
• 2026-10-08
  Acceptable use policy updatedSection 02 adds seven rules: no using the service or its output to build a competing product or train a competing model; no bulk harvesting of output to copy or distil a model; no deceiving voters or impersonating candidates and officials; no content that encourages or glorifies suicide, self-harm or eating disorders; no sexually explicit content; no attacks on critical infrastructure; and no passing AI output off as human-made to deceive someone. It also says plainly what the automatic text filter checks and what it does not, and that shared pages are not labelled as AI-generated.
• 2026-10-08
  Data processing agreement updatedCorrects two statements about email. Deleting an account sends no confirmation email, and the addendum no longer gives as the reason that the product sends no account email. The breach-notice paragraph now says the product emails one account at a time and that no procedure for emailing a set of affected users has been built or exercised. The age rule changes: the children row no longer says accounts are for adults. Sign-up asks for an age and refuses anyone under 13, anyone under 18 needs permission from a parent or guardian, and we still perform no age verification and no verifiable parental consent. Annex I now says the ban on submitting health records applies to what a business customer submits under the DPA, and that the HealthEx connector is a separate personal feature, offered only in the United States and not inside an organisation workspace, which the DPA does not cover. Also states that on the Free plan a chat on the default model goes to a provider AGI chooses, not one you pick: Alibaba Cloud Model Studio, at its international endpoint in Singapore, or OpenRouter’s free router, depending on what is available for that turn.
• 2026-10-08
  Cookie policy updatedLists two new browser storage entries used only when you tick the marketing email box at sign-up: the privacy notice revision and a random identifier for that sign-up attempt. Explains Global Privacy Control in more detail: with the signal on, new optional choices such as marketing email and waitlist product updates are recorded as refusals and analytics stays off, while a marketing email choice already saved on your account stays until you withdraw it in Settings or the consent centre. Adds the referral cookie, set only when you open a referral link and kept for up to 30 days, and names the file that sets the signed-out session cookie correctly.
• 2026-10-08
  Subprocessors updatedCorrects what email we send through our email provider. The list said three kinds and no others; it now names them all: security alerts, account security codes, export-ready notices, billing and spend notices, workspace invitations, scheduled-task notifications and support replies to you, and support escalations, data-rights requests, copyright notices and operational alerts to us. No recipient was added or removed. The CLI is no longer described as released. The OpenRouter row and the Qwen (Alibaba) and Zhipu row now say that either can answer a Free plan chat on the default model, that AGI chooses which, and that the Alibaba path uses its international endpoint in Singapore. No subprocessor is added or removed. It also says where a question to the support assistant on the help pages is sent, and exactly which account facts go with it.
• 2026-10-08
  Security updatedRestates how deletion works in narrower, verified terms: stored media is deleted before its catalogue record and retried if deletion fails, erasure reports list what was deleted, skipped or failed, and the scheduled purge erases account data before the sign-in identity and stops if erasure is incomplete. Corrects three statements: the CLI is no longer described as released, it keeps provider keys in owner-only files on Linux or when the keyring is turned off, and an artifact can load scripts, styles, images and fonts from four pinned CDN hosts, where the page said images and fonts over https and scripts from two. The provider API keys row no longer says keys are encrypted under a device-derived key.
• 2026-10-08
  Service level agreement updatedCorrects two statements. One of the sixteen service domains has no measurement yet, where the page said three of fourteen. Alerts go by email to an on-call rotation when one is configured and otherwise to a single monitored mailbox; there is still no round-the-clock coverage. No commitment, credit or exclusion changed. The date is now labelled Last updated, not Reviewed.
• 2026-10-08
  Refund policy updatedRe-issued on the public launch date, 2026-10-08. No change to the text.
• 2026-10-08
  Referral program terms updatedA referral trial that converts to a paid plan is billed every month; the earlier text also mentioned yearly billing, which the trial does not offer. The age to take part changes: you must be at least 13, where the terms said 18, and anyone under 18 needs permission from a parent or guardian.
• 2026-10-08
  Accessibility updatedRe-issued on the public launch date, 2026-10-08. No change to the text.
• 2026-10-08
  Trust posture updatedCorrects three rows. Artifact sandboxing blocks fetch, XHR and WebSocket calls but is not full network isolation: scripts, styles, images and fonts can still load from four pinned CDN hosts. The CLI is no longer described as released. The CLI keeps provider keys in owner-only files on Linux or when the keyring is turned off. The DPDP parental consent row is corrected for the new age rule: web sign-up now asks for an age and refuses anyone under 13, but the age is self-declared and no parental permission is verified, so the row still reads Not implemented. The date at the top is now labelled Last updated, not Last reviewed. The next review date is unchanged.
• 2026-10-08
  EU representative updatedRe-issued on the public launch date, 2026-10-08. No change to the text.
• 2026-10-08
  Mobile app terms and privacy updatedRe-issued on the public launch date, 2026-10-08, with the new age rule: you must be at least 13 to create an account, anyone under 18 needs permission from a parent or guardian, and a higher digital-consent age applies where the law sets one.
• 2026-10-08
  Copyright and IP complaints updatedSays plainly that when a link is disabled, a person contacts the account that published the material, with a copy of the notice; the product does not send that message automatically.
• 2026-10-08
  Model licences updatedThis page now carries its own date, 2026-10-08, the public launch day. The date it printed before was the day the model list was last synced, and it is still shown under that name. No licence text changed.
• 2026-10-08
  India: DPDP notice updatedAdds the optional marketing email choice at sign-up, which rests on your consent and can be turned off on its own. Clarifies that leaving that box unticked at sign-up records no decision, while the early-access forms record the boxes you leave unticked. Corrects five statements: the security audit log is deleted by a scheduled job every night, not by hand; account deletion sends no confirmation email, and the notice no longer says the product sends only two kinds of email; the recipients an earlier version listed as missing from the subprocessor list are on it now, and Apple was named in error; the CLI is no longer described as released; and the CLI keeps provider keys in owner-only files on Linux or when the keyring is turned off. The age rule changes: an account can be created from the age of 13, and anyone under 18 needs permission from a parent or guardian. We still perform no age verification and no verifiable parental consent, so people this Act treats as children can hold accounts here; the notice says so in place of saying we do not knowingly collect a child’s data. The age asked at sign-up is not kept.
• 2026-10-08
  Data rights and consent updatedRe-issued on the public launch date, 2026-10-08. No change to the text.
• 2026-10-08
  How we use your data updatedThe CLI is no longer described as released. Nothing about how your data is used changed. Also states that on the Free plan a chat on the default model goes to a provider AGI chooses, not one you pick: Alibaba Cloud Model Studio, at its international endpoint in Singapore, or OpenRouter’s free router, depending on what is available for that turn.
• 2026-10-08
  Disclaimer updatedRe-issued on the public launch date, 2026-10-08. No change to the text.
• 2026-10-08
  Approvals updatedAdds connectors you sign in to at the provider. For those, AGI stores the access token and any refresh token encrypted in your account, together with the scopes granted and a label for the connected account. When you disconnect, or your account is deleted, AGI deletes its copy and asks the provider to revoke the tokens where it can; otherwise remove AGI in that provider account settings. Connectors whose provider registration is not in place are marked Needs setup and cannot be connected.
• 2026-10-08
  Supported countries and regions introducedA new page: where AGI is offered, including the territories of those countries, the countries and regions where it is not, with the reason for each group, what is the same in every country and what is not, and which languages the interface comes in. It states that sign-up is open in the European Economic Area and the United Kingdom and that no representative has been appointed in either.
• 2026-10-08
  Government and law-enforcement requests introducedA new page: what legal process we require before giving account data to a government, when we tell the account holder, how emergencies are handled, and where to send a request. No transparency report has been published yet.
• 2026-09-29
  Privacy policy updatedAdds how the Google connectors access, use, store and share Google user data, and states compliance with the Google API Services User Data Policy, including the Limited Use requirements. Product analytics now also covers usage events from the AGI apps recorded against your account, never your messages or files, so a consent given under an earlier version covers page views only, and a workspace administrator can turn analytics off for every member. Adds that a deleted conversation can be restored for 30 days before a daily job permanently deletes it, and that background jobs are kept for up to 30 days.This version is the first published on this site since the one dated 2026-09-12, so it is the first to publish the changes made in the versions dated 2026-09-21, 2026-09-22 and 2026-09-27.
• 2026-09-29
  Mobile app terms and privacy updatedAdds product usage events, sent only in managed-cloud mode and only after you allow product analytics, as a data category, and removes the statement that no usage event leaves your device.This version is the first published on this site since the one dated 2026-08-13, so it is the first to publish the changes made in the version dated 2026-09-21.
• 2026-09-28
  Subprocessors updatedFly.io now also runs our malware scanner, which every uploaded file passes through and which keeps no copy.This version is the first published on this site since the one dated 2026-09-12, so it is the first to publish the changes made in the versions dated 2026-09-21 and 2026-09-22. The window to object to a subprocessor added in those versions runs from the day this version is first published here.
• 2026-09-27
  Privacy policy updatedAdds the checks the referral program runs against self-referral, on the basis of legitimate interests: a one-way hash of the network you signed up from, and a comparison of your app installations, your card's Stripe fingerprint and your email address with those of the person who referred you. Updates the number of user-scoped tables account erasure covers.This version was settled on 2026-09-27 and replaced on 2026-09-29 before it was published on this site; the first version published here after it is dated 2026-09-29.
• 2026-09-27
  Acceptable use policy updatedAppeals can be filed in the product or through the appeal form, each with a reference, as well as by email.This version is the first published on this site since the one dated 2026-08-05, so it is the first to publish the changes made in the version dated 2026-09-22.
• 2026-09-27
  Refund policy updatedAdds the signed-in refund request; a refund, once per account, of an unused plan payment or of unspent top-up credits asked for within 7 days; the 14-day withdrawal in the EU, EEA and UK, prorated by the credits used when you asked at checkout for immediate access; and the hold on your plan and credits while a payment dispute is open. Corrects how plan upgrades are billed: an upgrade starts a new billing period on the day you upgrade.
• 2026-09-27
  Referral program terms introducedThe first version of these terms: who can take part in the referral program, the friend's free trial, the bonus credits each of you can earn and when they expire, and the fair use checks against self-referral.
• 2026-09-27
  Accessibility updatedAdds the in-product Report an accessibility barrier ticket beside the email address.
• 2026-09-27
  Copyright and IP complaints updatedAdds the Impersonation section and an impersonation option on the report form.
• 2026-09-27
  Approvals updatedAttached files, project knowledge files and selected connector context now count as untrusted content, so a turn that holds them asks before anything could send data out.This version is the first published on this site since the one dated 2026-09-02, so it is the first to publish the changes made in the version dated 2026-09-22.
• 2026-09-23
  Terms of service updatedLinks each provider's current terms and explains how the gateway's, the serving provider's and your own key's terms apply to the route you choose.This version is the first published on this site since the one dated 2026-08-11, so it is the first to publish the changes made in the version dated 2026-09-22.
• 2026-09-23
  Cookie policy updatedStates that we now honour Global Privacy Control, which the policy said we did not read: a browser that sends it is treated as refusing analytics and the product-update list, over any choice stored earlier. Corrects where the identity provider's cookies come from, removes two browser storage entries the product no longer writes, and adds two it does: the account that dismissed the Free plan notice, and a momentary check that local storage works. A visitor who chose under an earlier version is asked to choose again.
• 2026-09-22
  Terms of service updatedDiscloses the Experiential Labs promotional route for Free-plan chats, on which Experiential Labs captures prompts and responses by default, keeps them for up to 30 days and may use them to develop, evaluate and improve its services and hosted models.This version was settled on 2026-09-22 and replaced on 2026-09-23 before it was published on this site; the first version published here after it is dated 2026-09-23.
• 2026-09-22
  Privacy policy updatedAdds that on the Experiential Labs promotional route for Free-plan chats, Experiential Labs keeps prompts and responses for up to 30 days and may use them to develop, evaluate and improve its services and hosted models, and that its no-training setting does not stop this capture.This version was settled on 2026-09-22 and replaced on 2026-09-27 before it was published on this site; the first version published here after it is dated 2026-09-29.
• 2026-09-22
  Acceptable use policy updatedThe website now starts on Skip approvals instead of asking before every tool action, and the policy describes the actions that still need your review.This version was settled on 2026-09-22 and replaced on 2026-09-27 before it was published on this site; the first version published here after it is dated 2026-09-27.
• 2026-09-22
  Subprocessors updatedCorrects the Experiential Labs entry against its current privacy and data-controls documents and adds its Free-plan promotional route, on which Experiential Labs captures prompts and responses by default, keeps them for up to 30 days and may use them to develop, evaluate and improve its services and hosted models.This version was settled on 2026-09-22 and replaced on 2026-09-28 before it was published on this site; the first version published here after it is dated 2026-09-28.
• 2026-09-22
  Approvals updatedA new website account now starts on Skip approvals instead of Ask before every action: eligible reads, searches, sandboxed code and reversible actions run without a prompt, while destructive or unknown actions, your saved per-tool choices and workspace restrictions still apply, and the server asks when your setting cannot be read.This version was settled on 2026-09-22 and replaced on 2026-09-27 before it was published on this site; the first version published here after it is dated 2026-09-27.
• 2026-09-21
  Privacy policy updatedAdds how dictation and Voice Mode audio is handled: it goes to OpenAI and we keep none of it. Adds that a picture you attach has its location, camera and time details removed before it leaves your device, and is not sent if that cannot be done. Adds a security incidents section on the breach procedure, its 72-hour clock for notifying a regulator and how a notice would reach you, and says that some models are reached through an inference gateway, each named on the subprocessors page.This version was settled on 2026-09-21 and replaced on 2026-09-22 before it was published on this site; the first version published here after it is dated 2026-09-29.
• 2026-09-21
  Subprocessors updatedAdds five recipients: the Cheaper Inference and Experiential Labs inference gateways, Cloudflare Workers AI, Vercel AI Gateway, and OpenAI for dictation and Voice Mode. Removes MiniMax, which was listed but received no Managed Cloud traffic, and corrects when Qwen and Zhipu requests pass through OpenRouter.This version was settled on 2026-09-21 and replaced on 2026-09-22 before it was published on this site; the first version published here after it is dated 2026-09-28.
• 2026-09-21
  Trust posture updatedCorrects three rows against the code: release signing covers the macOS desktop app only, as there is no Windows build; business continuity says the host-neutral restore drill runs every week and only the production database has no scheduled restore test; and security event logging adds the log of each call a connector makes. Records the 21 September review of the subprocessor list, re-measures row-level isolation and the protected route groups, and says /status runs its checks at most once a minute.
• 2026-09-21
  Mobile app terms and privacy updatedCorrects the EU AI Act disclosures for the planned app: it will tell you it is an AI system on a first-run screen you accept before its first model request, and only its planned on-device data export, not the per-conversation export sheet, will mark chat transcripts with a machine-readable AI-generated marker.This version was settled on 2026-09-21 and replaced on 2026-09-29 before it was published on this site; the first version published here after it is dated 2026-09-29.

Forthcoming.

• MobileApp Store + Play Store listings. Target: To be announced.
• Chrome extensionCWS submission once visual review clears. Target: To be announced.
• VS Code extensionMarketplace listing planned for its release. Target: To be announced.