Kernel

changelog

the latest changes to the kernel platform

for api library updates, see the node sdk, python sdk, and go sdk changelogs.
productdocs

product

Launched a bug bounty program covering the Kernel API, dashboard, MCP server, and browser infrastructure. The published scope and policy define eligible targets, severity tiers, and safe-harbor terms for security researchers.

Split browser telemetry into control (agent-driven browser actions) and a new opt-in platform category for VM-management calls like recording capture, profile save, and telemetry publish. The default capture set is now cleaner and cheaper, and executePlaywrightCode events include the submitted code (clipped to 8 KB).

Enabled WebMCP by default in Kernel browsers and consolidated the browser feature flags into a single feature list, giving agents Model Context Protocol access out of the box without extra configuration.

Improved MCP server support for the OpenAI Apps SDK with the required domain verification challenge, so Kernel MCP can be registered as an OpenAI App connector.

Added a submit_feedback tool to the MCP server for product, MCP, documentation, and general feedback, so agents can report a problem without leaving the session. Submissions are redacted of emails, URLs, and token-shaped values before capture.

Improved managed auth credential correction: @onkernel/managed-auth-react surfaces a notice when a field value is rejected, and submitting a corrected value now retries the login instead of failing the flow. Consent prompts are also gated until session initialization completes.

Extended the CLI (v0.32.0–v0.33.0) with an fx MCP install target for one-command setup of the fx MCP.

Reduced Playwright per-frame overhead by memoizing page target IDs, cutting redundant CDP lookups during multi-step automations.

Upgraded Hypeman to Firecracker v1.16.1, picking up upstream snapshot-restore and jailer fixes for the microVM runtime. New instances and snapshots use v1.16.1; existing snapshots keep restoring on the Firecracker version recorded in their metadata.

docs

Documented the new control vs platform browser telemetry categories, including which operations fall into each and how to opt in to platform events.

Added a navigation path recommendation to the bot detection guide so agents land on target pages through the flows real users take, rather than deep-linking into gated URLs.

Added an fx MCP setup guide covering both CLI and MCP installation paths.

Made kernel.sh agent-readable: the homepage server-renders with a no-JavaScript fallback, and llms.txt, index.md, and the OpenAPI, OAuth, and MCP discovery surfaces are published for agents that read the site directly.

productdocs

product

Added org entitlements: a read-only GET /org/entitlements endpoint returning your organization's effective feature access and constraints after applying its plan, active trial treatment, plan status, and any organization-specific overrides. Null constraint values mean unlimited.

Added a memory option when creating a browser: request 16GiB instead of the default 8GiB for headful, non-GPU sessions. Every browser now reports its allocation on create, read, list, and pool acquire.

Added customer-configurable OTLP export for on-demand browser sessions. Create, list, update, and delete project-scoped OTLP/HTTP destinations through the API or CLI, then point a session at one with telemetry.export.otlp.destination when creating a browser. Destination headers are encrypted at rest and returned redacted. Browser pools do not support export.

Expanded browser telemetry with two event types: proxy failures now arrive as first-class proxy_error events carrying a typed code instead of being buried in the raw network stream, and the CDP commands that drive the browser — input gestures, navigation, dialogs, file selection, screenshots — are reported as cdp_command under the control category.

Proxy configurations are now cleaned up automatically. Once an organization has more than 100 active configurations, those unused for 14 days are deleted; anything attached to a session, browser pool, instance, or managed auth connection is retained.

Extended the CLI (v0.30.0–v0.31.0) with the kernel telemetry destinations command group, --memory on browsers create, --proxy-name / --proxy-mode and --telemetry-export-otlp across browser and managed auth commands, a new kernel auth context for inspecting the principal and scope behind your credentials, --name and --query filters on the list commands, and a Stagehand v4 project template. Note that kernel browsers list changed its column order, so scripts parsing that table positionally need updating.

docs

Added a Foreman integration guide to the Vercel section.

Documented replay iframe embedding for embedding session replays inside your own dashboards.

Documented the 30-day retention window for browser telemetry events.

Documented automatic proxy cleanup behavior.

Added a print-to-PDF example to the Chrome policies doc.

Documented deployment API key lifecycle and the list of reserved env vars that cannot be overridden at deploy time.

Updated Stagehand integration docs to v4.