← Blog
Changelog3 min read
Changelog: October 2026
API tokens, invitations, plan limits, password confirmation, a strict CSP and more, all in the closed beta.
Everything that shipped to the closed beta this month.
New
- API tokens and the public API. Apps read one environment's secrets with a read-only, expiring token.
- Invitations. Invite teammates by email with a role. Only the invited address can accept.
- Secret history and rollback. Go back to an earlier version in one click.
- Plan selection. New workspaces start on the Free plan, with a preview of what's coming.
- Agent setup. One click copies a prompt that sets up Claude Code, Cursor, Codex or Grok with Nionx.
- Delete workspace. With the exact name and your password, and never your last one.
Security
- Confirm your password (and 2FA code) before sensitive actions.
- Two-factor authentication with an authenticator app and backup codes.
- A strict Content Security Policy on the dashboard.
- security.txt, and private security reports from inside the dashboard.
Free plan limits
2 workspaces per person; per workspace 10 projects, 5 members, 20 API tokens and 10,000 API calls a month; 5 environments per project and 100 secrets per environment; 90 days of audit history. You can see your usage in each workspace's settings.
