Changelog

Drive, notes as folders, an iOS widget and an Android app that works. This release also removes eight features that nobody used.

Drive

• A document store for the organization. Upload a file, file it in a folder, and mention it from a task, a note or a comment. Web, mobile and the MCP reach the same files.
• The preview plays a video and an audio file, and an image no longer sits behind a skeleton that never clears.
• The upload allowlist accepts video and audio.
• A browser end-to-end suite covers the Drive and the Notes.

Notes

• A note can be a folder. Web and mobile browse the tree, and a folder opens as its own screen on the phone.
• The note page is the editor and nothing else. Live co-editing is gone.
• An agent reads and writes the folder fields the API already carried.

iOS and Android

• A Tasks widget for the home screen and the lock screen, drawn in the app's own colours.
• Android gets a tab bar, inset form cards, native switches and a read-only smoke tour.
• The row swipe is one continuous gesture, and a full swipe stays inside the reach of a thumb.
• The Profile screen no longer crashes on iOS.

Notifications

• A push arrives when a task appears or moves. It arrives once, in the workspace it came from.
• The toggles in settings govern push. Email now carries account mail only.
• A push, a widget row and a web notification each open the task they name.

Agents and the MCP

• A search tool, plus the task fields the API already had.
• Every tool reaches the organization you meant, instead of the first one you joined.
• The Elliptic agent skill ships with the repo.

Removed

• Eight features that nobody used, and seven project views, out of the API and the web app together.
• The docs and the agent skill describe what is left.

Fixes

• The command palette no longer replaces the page with an error screen after you open a task, a note or a meeting.
• A markdown table renders as a table in a comment, a task update and a description. The editor kept the cells apart, instead of joining them on save.
• A one-line preview shows clean text, with no asterisks and no pipes.
• The API commits its session before the response leaves.
• The sidebar is one list, and a long line stays inside the task dialog.

A second MCP OAuth compatibility patch: your choices on the consent screen now decide the grant for clients that request no scopes.

MCP OAuth

• Fixed write access for MCP clients. Clients like Claude Code send no scope parameter on the authorize request, and the server silently reduced every consent decision — including Root / Admin — to the read-only baseline. The selection you make on the consent screen is now exactly the grant.
• Clients that request explicit scopes are unchanged: the grant is still capped at what the client requested.

A compatibility fix for connecting MCP clients: the OAuth authorization server no longer requires the RFC 8707 resource indicator.

MCP OAuth

• The resource parameter is now optional on the authorize request. When a client omits it, the server binds the request to the canonical MCP resource URI from its own metadata, so clients that predate resource indicators in the MCP auth spec (for example JetBrains Air's MCP settings) can complete the consent flow.
• A provided resource must still equal the canonical MCP URI, so audience binding is unchanged: a code minted for this server cannot be replayed against another one.

The public site, properly. A working marketing site with deep product pages, a hosted blog and changelog, and full SEO.

Marketing site

• A fully functional footer and top nav, with every link resolving.
• Deep, technical product pages for Projects, Meetings, Notes, and Activity.
• Rebuilt About and Contact pages, plus Privacy and Terms.

Blog and changelog

• A Elliptic-hosted blog with posts and an RSS feed.
• This changelog, hosted on the site.

SEO and social previews

• Sitemap, robots, and canonical URLs across the site.
• Generated Open Graph and Twitter cards, with a per-page image.

The first public release of Elliptic. The full agent-native work platform, open source under Apache-2.0 and self-hostable with one docker compose.

Work tracking

• Projects with leads, members, states, and templates.
• Linear-style tasks with stable identifiers like DEMO-42, List, Board, and Table views, sub-tasks, labels, priorities, and the PQL query language.
• Cycles, initiatives, milestones, and releases for planning at every altitude.
• Intake and triage to turn inbound requests into tracked work.

Meetings and knowledge

• Speaker-attributed meeting transcripts, AI summaries, and ask-the-meeting.
• Notes and a company wiki with live multi-cursor co-editing.
• Folio meeting import.

AI and agents

• A built-in MCP server (OAuth 2.1, about 144 tools) that exposes the whole workspace to agents.
• An in-product assistant, plus agents with budgets and a sandboxed runner.
• Bring your own OpenAI or Anthropic key, encrypted at rest, with every run written to an audit log.

Collaboration

• Live sync over SSE, threaded comments, reactions, activity feeds, notifications, and full-text search.
• Public embeds and shareable links.

Enterprise and platform

• True multi-tenancy with org-scoped data isolation.
• SSO over SAML and OIDC, SCIM, LDAP, IdP group sync, and domain verification.
• RBAC with audit logs, approvals, and compliance surfaces.
• Webhooks, an outbox event backbone, S3-compatible storage, and analytics dashboards.