LoginSign Up
← Back to all sparks
A

AFFiNE

COLLAB
Velocity6.3

Open-source workspace for docs, whiteboards and databases

affine.pro ↗

AFFiNE retires legacy access tokens for scoped MCP credentials while hardening its native apps

mcpself-hostednative-appsauthenticationcollaborationopen-source
◆Current state
AFFiNE is shipping on a fast dual-track canary/beta cadence, with recent work split between native/mobile hardening and a rebuild of how external tools authenticate. The headline move is replacing legacy access tokens with managed MCP credentials that carry expiry, rotation, and read-only versus read/write scopes. iOS stability fixes and a shared Mermaid/Typst preview path round out the last week of releases.
◆Where it's heading
The direction is a workspace built to be driven by agents as much as by people: MCP credentials with granular access modes turn AFFiNE into a first-class MCP endpoint, while refresh-token support and version guards firm up the self-hosted auth story. In parallel, native preview consolidation and iOS polish show a push to make the mobile client a peer to desktop rather than an afterthought.
◆Prediction
Expect the MCP credential system to graduate from canary into the 0.27 stable line, likely paired with read/write agent tooling surfaced directly in the workspace UI.

◆Recent moves

  1. 1d ago

    Version guard for self-hosted server compatibility

    A version-guard fix tightens how self-hosted servers validate compatible beta and release-candidate builds and reject outdated pre-releases. It is housekeeping on the auth-hardening thread rather than a new capability.

    View source ↗
  2. 1d ago

    2026.7.13-canary.1006

    Native and mobile apps move Mermaid and Typst preview onto a shared rendering path, with extra Rust and iOS release-build tuning. Incremental but real progress on the effort to make the native clients first-class.

    View source ↗
  3. 1d ago

    0.27.0-beta.5

    The beta-channel cut of the same shared-preview change (PR #15223) that already shipped in canary. A release-channel republish, not a separate improvement.

    View source ↗
  4. 2d ago

    2026.7.12-canary.1135

    ⚡ SPARK

    AFFiNE replaces legacy access tokens with managed MCP credentials, complete with create, reveal, rotate, revoke, expiry, and read-only versus read/write scopes. It is the clearest sign yet that the workspace is being built for agent access, not just human collaboration.

    View source ↗
  5. 3d ago

    Server-side refresh token support

    Server-side refresh-token support lands, part of the same reworking of the auth stack that produced MCP credentials and the version guards. It buys longer, more resilient sessions for self-hosted deployments.

    View source ↗
  6. 5d ago

    iOS keyboard, image picker, and scrolling fixes

    iOS-only stabilization for the keyboard toolbar, native image picker, and WKWebView scrolling. Polish that doesn't change capability but makes the mobile app usable.

    View source ↗