LoginSign Up
← Back to PM
Weekly · PM · Week of October 12, 2026

Work-management tools opened themselves to agents and, in the same breath, put audit trails and secrets controls around them.

hosted-mcpagent-governancesecrets-managementaccountability-for-aipatch-line-durability
O
Generated 2h agoDrawn from 11 products

The week in project-management

Twelve products updated, and the shared move is agent access with restraints. SmartSuite and My Hours exposed hosted MCP servers, while NocoBase and Tracecat worked on how agent runs get credentials and limits.

Leaders

SmartSuite launched a hosted MCP server that any MCP-compatible assistant, Claude included, can connect to over OAuth with no API key or local install. It also moved secrets out of the Script Engine to a dedicated page with an audit trail of who revealed what and when.

NocoBase is replacing classic no-code surfaces with an agent-built stack: a 41-package beta deleted the Workflow plugin, NocoBase Hub and the AI employee packages, and the newest beta has runners request a repository credential when a run needs it, rather than at claim time.

Tracecat cut 1.1.0 stable, making cgroup-enforced sandbox memory limits mandatory and unifying execution backends. It open-sourced agent approvals and the inbox in the alphas, gating semantic table search and channels behind an enterprise entitlement.

Fibery now lets users describe an entity page in plain language and get an editable Custom App view. The most recent release goes the other way and lets workspaces hide sensitive Space data from their own Admins.

Atarim made its AI agents' accumulated client memory readable and editable, and the 5.1 line cut AI action cost by 40% and added reports that cite their sources. The Boards release puts a timer on every stage.

Wildcards

Asana is the conservative entry: Subtask Date Rollups set a parent's dates from nested subtasks, and HIPAA arrived for Asana Gov domains with AI restricted to BAA-covered features. The release is a planning-accuracy fix rather than an agent feature.

Themes that compounded

  • Hosted MCP servers as a connector surface at SmartSuite and My Hours.
  • Audit logs for people and agents alike: My Hours 10.1 logs creates, approvals and rejections.
  • Open data models: Productboard v2 made entity types a workspace-specific open string.
  • Reporting for the money around delivery at Hive, including proposals and progress billing.
  • Durability fixes on supported lines at Camunda, whose 8.10 candidates fix replication data loss.

Watch this week

NocoBase publishes betas daily, so watch whether the 41-package deletion lands as stable or is walked back. For Tracecat, the 1.1.0 stable followed fast alphas, so watch for the first patch line. RentRedi shipped Maintenance Coordination that dispatches to landlords' own vendors first, a separate property-management thread.