Kernel

changelog

the latest changes to the kernel platform

for api library updates, see the node sdk, python sdk, and go sdk changelogs.
productdocs

product

Expanded WebMCP support: Kernel browsers now expose a WebMCP discovery and invocation API, and the MCP server gained browser WebMCP tool support so agents can list and call a site's WebMCP tools directly. WebMCP sessions now recover after missed events, and tool guidance was sharpened for empty catalogs and outcome-unknown cases.

Improved managed auth reliability and feedback: @onkernel/managed-auth-react now renders typed errors and reauth eligibility is risk-aware. The login agent also accounts for every visible field and authentication choice on the current auth surface — including controls inside nested frames — before pausing for input.

Added API support for multi-host app deployments, decoupling apps from a single host and load-balancing invocations across hosts for higher availability and throughput.

Added captcha and challenge telemetry: browser sessions now emit a captcha_solve_started event across both solver paths, and captcha task events carry a challenge_id so you can correlate solve attempts end to end.

Moved OTLP telemetry destinations from project scope to organization scope and added dashboard management with a launch-time destination picker and per-session detail, making it easier to route browser telemetry to your own observability stack.

Kernel browsers now install regional browser locale data, so pages render with locale-appropriate formatting for the session's region.

The MCP server now accepts a browser session name anywhere a session ID is expected, so you can reference browsers by the names you already use.

docs

Added a cookbook for Playwright with a computer-use fallback for steps pure Playwright can't complete.

Documented the live view domains the embedded live view loads from, so you can allowlist them.

Documented captcha task and challenge telemetry categories, including when events carry a challenge_id.

Refreshed the managed auth docs — canonical interactions, typed reauth outcomes, and the authenticator-requirement outcome — and improved managed auth discoverability across the docs.

Documented how to connect the MCP server with an API key when a client's strict OAuth issuer verification rejects the flow.

productdocs

product

Launched a bug bounty program covering the Kernel API, dashboard, MCP server, and browser infrastructure. The published scope and policy define eligible targets, severity tiers, and safe-harbor terms for security researchers.

Split browser telemetry into control (agent-driven browser actions) and a new opt-in platform category for VM-management calls like recording capture, profile save, and telemetry publish. The default capture set is now cleaner and cheaper, and executePlaywrightCode events include the submitted code (clipped to 8 KB).

Enabled WebMCP by default in Kernel browsers and consolidated the browser feature flags into a single feature list, giving agents Model Context Protocol access out of the box without extra configuration.

Improved MCP server support for the OpenAI Apps SDK with the required domain verification challenge, so Kernel MCP can be registered as an OpenAI App connector.

Added a submit_feedback tool to the MCP server for product, MCP, documentation, and general feedback, so agents can report a problem without leaving the session. Submissions are redacted of emails, URLs, and token-shaped values before capture.

Improved managed auth credential correction: @onkernel/managed-auth-react surfaces a notice when a field value is rejected, and submitting a corrected value now retries the login instead of failing the flow. Consent prompts are also gated until session initialization completes.

Extended the CLI (v0.32.0–v0.33.0) with an fx MCP install target for one-command setup of the fx MCP.

Reduced Playwright per-frame overhead by memoizing page target IDs, cutting redundant CDP lookups during multi-step automations.

Upgraded Hypeman to Firecracker v1.16.1, picking up upstream snapshot-restore and jailer fixes for the microVM runtime. New instances and snapshots use v1.16.1; existing snapshots keep restoring on the Firecracker version recorded in their metadata.

docs

Documented the new control vs platform browser telemetry categories, including which operations fall into each and how to opt in to platform events.

Added a navigation path recommendation to the bot detection guide so agents land on target pages through the flows real users take, rather than deep-linking into gated URLs.

Added an fx MCP setup guide covering both CLI and MCP installation paths.

Made kernel.sh agent-readable: the homepage server-renders with a no-JavaScript fallback, and llms.txt, index.md, and the OpenAPI, OAuth, and MCP discovery surfaces are published for agents that read the site directly.