LoginSign Up
← Back to all sparks
A

Appsmith

DEVOPS
Velocity5.0

Open-source low-code platform for building custom internal applications.

www.appsmith.com ↗

Appsmith 2.7 makes its MCP agent ask before deleting widgets and blocks stale edits.

mcp-serverai agentsinternal-toolsopen-sourcesecurity-hardening
◆Current state
Appsmith v2.7.0, released November 12, mostly extends the embedded MCP server: removing widgets now needs the user's approval, layout updates are refused if the page changed since the agent read it, and agents can build conditional forms, read editor-written JS objects and hide pages. It also adds Table auto height, tightens permissions for custom JS libraries and forking, and applies the restricted-host policy to S3 and DynamoDB datasources. Helm probe defaults and navigateTo behaviour change on upgrade.
◆Where it's heading
Since Appsmith AI shut down in September, the MCP server has become the product's AI strategy: each release widens what outside agents can build and adds guardrails on what they can break. Security hardening of permissions and datasources runs alongside in every release.
◆Prediction
Expect more MCP tools behind user approval and further 2.7.x patches for the Helm probe and navigateTo changes, as followed earlier minor releases.

◆Recent moves

  1. 1d ago

    v2.7 adds MCP approvals for deletes and conditional forms

    The MCP server gains approval for widget removal, refusal of stale layout edits and support for conditional forms, plus Table auto height and stricter fork and datasource permissions. It continues the shift that began when Appsmith AI shut down: outside agents build the apps, with more guardrails each release.

    View source ↗
  2. 16d ago

    v2.6 leaves Temporal for a new workflow engine, fixes Brotli CVE

    The largest upgrade since Appsmith AI's retirement: workflows leave Temporal for a new engine behind a checkpoint that can block startup. MCP gets richer SQL filters and security work continues, so the release follows the established pattern while adding a real migration risk for EE self-hosters.

    View source ↗
  3. 24d ago

    v2.5.1 hardens docker.env loading, SMTP hosts and signup rate limits

    A patch with upgrade actions for self-hosters: docker.env must contain literal values, signup is capped at 20 requests per IP per day, and SMTP datasources pointing at blocked hosts stop working. It also limits MCP Git access to local branches, matching the pattern of hardening each widening of agent access.

    View source ↗
  4. 1mo ago

    v2.5 widens MCP app-editing tools and tightens datasource credentials

    The first release after Appsmith AI's shutdown extends the MCP server to JS objects, more widget settings, function wiring and layout checks, and logs each tool call's outcome. It builds on v2.4's MCP pivot rather than redirecting it, while datasource credential checks and a one-way Git schema bump add upgrade work for self-hosters.

    View source ↗
  5. 1mo ago

    v2.4.3: MCP sessions shared via Redis as Appsmith AI hits end of life

    Shipped on the day Appsmith AI shut off, v2.4.3 moves MCP sessions into Redis so they survive restarts and work across replicas, which matters for any HA deployment using the new agent endpoint. It also preserves real server error messages in action runs and adds a Rich Text font control.

    View source ↗
  6. 1mo ago

    Release v2.4.2 🌈

    A maintenance release: a Bouncy Castle patch, a memory fix when cloning action-heavy pages, and analytics clean-up. It repeats the Appsmith AI end-of-life warning ahead of the September 30 cutoff.

    View source ↗