https://cybertoolchain.io/tools/portkey New releases and features in Portkey, tracked by The Cyber Toolchain. en Sat, 31 Oct 2026 07:46:08 GMT https://portkey.ai/docs/changelog https://portkey.ai/docs/changelog Sat, 31 Oct 2026 07:46:08 GMT Portkey adds a pre-model traffic inspection lifecycle stage and expands guardrail coverage to MCP tool calls⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Portkey now applies guardrails to MCP tool calls, extending coverage beyond standard model request/response traffic.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Portkey adds a new lifecycle stage to inspect traffic before it reaches a model. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://portkey.ai/docs/changelog https://portkey.ai/docs/changelog Fri, 16 Oct 2026 08:13:48 GMT Portkey adds Decisions API, MCP guardrails, startHooks lifecycle stage, and Meta/ElevenLabs provider support⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `startHooks` lifecycle stage to screen and normalize traffic before authentication, routing, or other hooks run — including two new checks: `Header Check` (allow/block by header key-value pairs) and `Header Transform` (remove, set, or rewrite headers before routing; `x-portkey-*` headers are protected); existing checks `allowedRequestTypes`, webhook, and JWT header lookup can also now run as `startHooks`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a Decisions API endpoint for typed-judgment models: send a question with structured state and receive a typed judgment (boolean, choice, or score) with probabilities and a calibrated confidence score, routing through the full gateway stack (auth, routing, retries, caching, logging, cost tracking); initial support covers TypeSafe's `Jev` model family. • Extends MCP Gateway guardrails so MCP tool calls pass through the same pre- and post-execution checks available for LLM requests; denied calls return a structured error with the guardrail and check ID. • Adds per-attempt retry logging, giving each retry its own log row with its own status and response instead of only surfacing the final result. • Adds `Meta` and `ElevenLabs` as new providers: `Meta` supports Chat Completions, Messages API, Responses API, and Files API, while `ElevenLabs` supports text-to-speech and speech-to-text with full observability and reliability features. • Extends xAI provider to support image generation with OpenAI-compatible parameters plus xAI-specific aspect ratio and resolution controls. • Adds Anthropic-protocol auto-detection on `/v1/models` so Claude Code and other Anthropic-native clients receive Anthropic's native model shape instead of the OpenAI-normalized shape. • Extends JWT authentication to accept multiple JWKS URLs and attribute requests to the matching workspace user. • Extends conditional routing to read fields from `multipart/form-data` requests (image edits, audio transcriptions). • Messages API reasoning models now stream their thinking phase as a `thinking` content block. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://portkey.ai/docs/changelog https://portkey.ai/docs/changelog Thu, 06 Aug 2026 10:51:18 GMT • Adds Secret References so `secret_mappings` can point virtual keys and integrations at credentials stored in AWS Secrets Manager, Azure Key Vault, or HashiCorp Vault — Portkey fetches values at runtime instead of storing keys directly. • Adds weekly (`rpw`) budget and usage windows so rate-limit caps align with weekly spend planning, not only per-minute or monthly aggregates. • Adds endpoint-scoped rate limits so chat completions, embeddings, and admin routes can each carry independent limits instead of one global rule. • Adds `GCP_WIF_AUDIENCE` and `GCP_WIF_SERVICE_ACCOUNT_EMAIL` environment variables to authenticate GCS log writes through GCP Workload Identity Federation (`gcs_assume` flow) when the gateway runs in AWS, eliminating long-lived GCP keys in AWS config. • Enables analytics for archived workspaces and accepts workspace slugs (alongside IDs) in saved filters, keeping reporting stable as workspaces are wound down or renamed. • Integrates Zscaler AI Guard as a guardrail partner via `beforeRequestHook` and `afterRequestHook`, requiring a `policyId` and supporting a configurable `timeout` (default 10000 ms). • Maps Portkey metadata to Vertex AI resource labels; adds enterprise search grounding via `enterpriseWebSearch` / `enterprise_web_search`; enables AWS workloads to reach Vertex AI using `GCP_WIF_AUDIENCE` and `GCP_WIF_SERVICE_ACCOUNT_EMAIL`. Breaking changes: • The gateway no longer forwards the `x-portkey-forward-headxers` header, preventing header-forwarding loops — any setup relying on that header being passed through will stop working. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://portkey.ai/docs/changelog https://portkey.ai/docs/changelog Wed, 05 Aug 2026 00:30:13 GMT • Adds Secret References so credentials stored in AWS Secrets Manager, Azure Key Vault, or HashiCorp Vault are fetched at runtime via `secret_mappings`, keeping plaintext keys out of Portkey config. • Adds weekly budget/usage windows (`rpw`) and endpoint-scoped rate limits, letting teams cap spend per API surface (chat completions, embeddings, admin routes) independently. • Adds Zscaler AI Guard guardrail integration applying Zscaler Detection Policies via `beforeRequestHook` / `afterRequestHook`, with required `policyId` and optional `timeout` (default 10 000 ms). • Adds required metadata key–value guardrails that block requests missing or carrying invalid required metadata fields before they reach the model. • Adds `tools`, `tool_choice`, and `stream_options` for `deepseek-chat`; maps `reasoning_effort` to thinking mode and surfaces `reasoning_content` in streams for `deepseek-reasoner`. • Adds Vertex AI enterprise search grounding via `enterpriseWebSearch` / `enterprise_web_search` (with separate cost attribution) and AWS-to-Vertex connectivity using `GCP_WIF_AUDIENCE` / `GCP_WIF_SERVICE_ACCOUNT_EMAIL`. • Adds Vertex AI resource label support by mapping Portkey metadata to Vertex resource labels. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://portkey.ai/docs/changelog https://portkey.ai/docs/changelog Tue, 04 Aug 2026 10:51:59 GMT Portkey March 2026 adds vault-backed Secret References, weekly/endpoint-scoped rate limits, cross-cloud GCS log delivery, and four new guardrail integrations. • Adds Secret References so credentials stored in AWS Secrets Manager, Azure Key Vault, or HashiCorp Vault can be mapped to integrations and virtual keys via `secret_mappings`, with Portkey fetching values at runtime instead of storing them directly. • Adds `rpw` (requests-per-week) budget and usage windows so rate limits can align with weekly planning cycles, alongside endpoint-scoped limits that let chat completions, embeddings, and admin routes carry independent caps. • Adds `GCP_WIF_AUDIENCE` and `GCP_WIF_SERVICE_ACCOUNT_EMAIL` environment variables to enable GCP Workload Identity Federation (`gcs_assume` style) for GCS log delivery when the gateway runs in AWS, eliminating static cross-cloud credentials. • Adds Zscaler AI Guard guardrail integration using `beforeRequestHook` and `afterRequestHook` hooks, requiring a `policyId` and supporting a configurable `timeout` (default 10000 ms) to apply Zscaler Detection Policies to LLM inputs and outputs. • Adds Akto Agentic Security as a guardrails partner to scan LLM inputs and outputs for prompt injection and sensitive data leakage via hooks with a configurable `timeout` (default 5000 ms). • Adds `customHost` configuration to the Bedrock guardrail plugin so evaluations can target private or regional Bedrock-compatible endpoints instead of the default public Bedrock URLs. • Adds required metadata key–value guardrails that block requests at the gateway before they reach the model if required metadata fields are missing or invalid. • Extends analytics so organization admins and owners can include archived workspaces in graphs and summaries; saved filters now accept workspace slugs alongside IDs. • Adds DeepInfra provider support with tool calling via `tools`, `tool_choice`, and `parallel_tool_calls`, plus completions and embeddings endpoints. • Adds `stream_options` support for DeepSeek `deepseek-chat`, and maps `reasoning_effort` to thinking mode for `deepseek-reasoner`, returning `reasoning_content` in streams. • Extends Bedrock batch inference to support embeddings in addition to chat completions. • Adds Vertex AI enterprise web search grounding via `enterpriseWebSearch` / `enterprise_web_search` with separate cost attribution, Portkey metadata mapping to Vertex resource labels, and AWS-to-Vertex access via `GCP_WIF_AUDIENCE` and `GCP_WIF_SERVICE_ACCOUNT_EMAIL`. • Adds Azure AI Foundry rerank support for Cohere rerank models (e.g. `cohere.Cohere-rerank-v4.0-pro`), with the gateway stripping the `cohere.` prefix for the provider. • OpenTelemetry GenAI semantic spans now follow semconv 1.40.0 for inference and embeddings, with OTEL exporter support for guardrail flows and custom resource attributes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://portkey.ai/docs/changelog https://portkey.ai/docs/changelog Thu, 30 Jul 2026 15:46:24 GMT Portkey adds vault-backed secret references, weekly/endpoint-scoped rate limits, two new guardrail integrations, and broader provider coverage. • Introduces weekly rate/budget windows (`rpw`) and endpoint-scoped rate limits, letting teams cap spend per API surface (chat completions, embeddings, admin routes, etc.) independently. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://portkey.ai/docs/changelog https://portkey.ai/docs/changelog Tue, 28 Jul 2026 16:00:14 GMT Portkey March 2026: vault-backed credentials, weekly rate limits, cross-cloud GCS logging, and four new guardrail integrations. • Adds Secret References to pull credentials from AWS Secrets Manager, Azure Key Vault, or HashiCorp Vault at runtime via `secret_mappings`, keeping secrets out of Portkey config. • Supports weekly budget and usage windows (`rpw`) for rate limits, enabling caps aligned to weekly planning and review cycles. • Adds endpoint-scoped rate limits so chat completions, embeddings, and admin routes can carry independent limits instead of a single global rule. • Enables GCP Workload Identity Federation log delivery from AWS-hosted gateways to GCS via `GCP_WIF_AUDIENCE` and `GCP_WIF_SERVICE_ACCOUNT_EMAIL`, eliminating long-lived cross-cloud keys. • Allows organization admins to include archived workspaces in analytics graphs and summaries; saved filters now accept workspace slugs alongside IDs. • Integrates Zscaler AI Guard as a guardrail partner, applying Zscaler Detection Policies to LLM inputs and outputs via `beforeRequestHook` and `afterRequestHook` with a required `policyId`. • Integrates Akto Agentic Security as a guardrail partner for scanning LLM inputs and outputs for prompt injection and sensitive data leakage. • Adds `customHost` to the Bedrock Guardrails plugin, routing guardrail evaluation to private or regional Bedrock-compatible endpoints. • Adds required metadata key–value guardrails that block requests missing specified metadata fields before they reach the model. • Adds DeepInfra provider support with tool calling (`tools`, `tool_choice`, `parallel_tool_calls`), completions, and embeddings endpoints. • Expands DeepSeek support: `deepseek-chat` gains `tools`, `tool_choice`, and `stream_options`; `deepseek-reasoner` maps `reasoning_effort` to thinking mode and returns `reasoning_content` in streams. • Extends Bedrock batch inference to support embeddings jobs alongside existing chat completions batch patterns. • Maps Portkey metadata to Vertex AI resource labels and adds enterprise search grounding via `enterpriseWebSearch` / `enterprise_web_search` with separate cost attribution. • Enables AWS workloads to reach Vertex AI through AWS–GCP WIF using `GCP_WIF_AUDIENCE` and `GCP_WIF_SERVICE_ACCOUNT_EMAIL`. • Adds Azure AI Foundry rerank support for Cohere rerank models (e.g., `cohere.Cohere-rerank-v4.0-pro`), with the gateway stripping the `cohere.` prefix for the provider. • Updates OpenTelemetry GenAI semantic spans to semconv 1.40.0 for inference and embeddings, with OTEL exporter support for guardrail flows and custom resource attributes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://portkey.ai/docs/changelog https://portkey.ai/docs/changelog Fri, 24 Jul 2026 15:22:11 GMT Portkey adds vault-backed Secret References, weekly rate limits, cross-cloud GCS log delivery, and four new guardrail integrations. • Adds Secret References so virtual keys and integrations can pull credentials at runtime from AWS Secrets Manager, Azure Key Vault, or HashiCorp Vault via `secret_mappings`, keeping secrets out of Portkey config. • Supports weekly budget and usage windows (`rpw`) for rate-limit policies so spend caps align with weekly planning cycles. • Adds endpoint-scoped rate limits so chat completions, embeddings, and admin routes can each carry independent limits instead of a single global cap. • Enables GCS log storage from AWS-hosted gateways via GCP Workload Identity Federation (`GCP_WIF_AUDIENCE`, `GCP_WIF_SERVICE_ACCOUNT_EMAIL`), eliminating long-lived cross-cloud credentials. • Lets organization admins include archived workspaces in analytics graphs and filters, with workspace slugs now accepted alongside IDs in saved filters. • Integrates Zscaler AI Guard as a guardrail partner, applying Zscaler Detection Policies to LLM inputs and outputs via `beforeRequestHook`/`afterRequestHook` with a required `policyId`. • Integrates Akto Agentic Security as a guardrail partner to scan LLM traffic for prompt injection and sensitive data leakage. • Adds `customHost` support for the Bedrock Guardrails plugin so evaluations route to private or regional Bedrock-compatible endpoints. • Adds required metadata key–value guardrails that block requests missing specified fields before they reach the model. • Adds DeepInfra provider support with tool calling (`tools`, `tool_choice`, `parallel_tool_calls`), chat completions, and embeddings. • Extends DeepSeek support: `deepseek-chat` gains `tools`, `tool_choice`, and `stream_options`; `deepseek-reasoner` maps `reasoning_effort` to thinking mode and surfaces `reasoning_content` in streams. • Extends Bedrock batch inference to cover embeddings in addition to chat completions. • Maps Portkey metadata to Vertex AI resource labels and adds enterprise web search grounding via `enterpriseWebSearch`/`enterprise_web_search`. • Enables AWS workloads to reach Vertex AI through AWS–GCP Workload Identity Federation (`GCP_WIF_AUDIENCE`, `GCP_WIF_SERVICE_ACCOUNT_EMAIL`). • Adds Azure AI Foundry rerank support for Cohere rerank models (e.g. `cohere.Cohere-rerank-v4.0-pro`), with the gateway stripping the `cohere.` prefix for the provider. • Updates OpenTelemetry GenAI semantic spans to semconv 1.40.0, adds OTEL exporter support for guardrail flows, and supports custom resource attributes for downstream APM and tracing. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://portkey.ai/docs/changelog https://portkey.ai/docs/changelog Tue, 21 Jul 2026 15:30:54 GMT Portkey adds vault-backed credentials, weekly rate limits, cross-cloud GCS logging, and four new guardrail integrations in March 2026. • Introduces weekly rate and budget windows (`rpw`) so spend caps align with team planning cycles, not just per-minute or monthly aggregates. • Adds endpoint-scoped rate limits so chat completions, embeddings, and admin routes can each carry independent limits instead of a single global rule. • Enables GCP Workload Identity Federation log storage (`gcs_assume`) from AWS-hosted gateways via `GCP_WIF_AUDIENCE` and `GCP_WIF_SERVICE_ACCOUNT_EMAIL`, eliminating static GCP keys in AWS. • Allows organization admins to include archived workspaces in analytics graphs and filters; saved filters now also accept workspace slugs alongside IDs. • Integrates Zscaler AI Guard as a guardrails partner, applying Zscaler Detection Policies to LLM inputs and outputs via `beforeRequestHook`/`afterRequestHook` with a required `policyId`. • Integrates Akto Agentic Security as a guardrails partner to scan LLM traffic for prompt injection and sensitive data leakage via configurable hooks and timeout. • Adds required metadata key–value guardrails that block requests missing or carrying invalid metadata fields before they reach the model. • Supports DeepInfra tool calling (`tools`, `tool_choice`, `parallel_tool_calls`) plus completions and embeddings endpoints. • Adds DeepSeek `deepseek-chat` tool calling (`tools`, `tool_choice`, `stream_options`) and `deepseek-reasoner` reasoning effort mapping with `reasoning_content` in streams. • Extends Bedrock batch inference to support embeddings in addition to chat completions. • Adds Azure AI Foundry rerank support for Cohere rerank models (e.g., `cohere.Cohere-rerank-v4.0-pro`), with the gateway stripping the `cohere.` prefix for the provider. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://portkey.ai/docs/changelog https://portkey.ai/docs/changelog Mon, 20 Jul 2026 13:25:19 GMT • Adds Secret References so Portkey fetches credentials at runtime from AWS Secrets Manager, Azure Key Vault, or HashiCorp Vault via `secret_mappings`, keeping keys out of Portkey config entirely. • Enables GCP Workload Identity Federation log delivery from AWS-hosted gateways to Google Cloud Storage via `GCP_WIF_AUDIENCE` and `GCP_WIF_SERVICE_ACCOUNT_EMAIL`, eliminating long-lived GCP keys in AWS. • Adds `customHost` support on the Bedrock Guardrails plugin so guardrail evaluation hits private or regional Bedrock-compatible endpoints instead of default public URLs. • Adds `tool_choice`, `stream_options`, and streaming usage reporting to DeepSeek `deepseek-chat`; maps `reasoning_effort` to thinking mode and surfaces `reasoning_content` in streams for `deepseek-reasoner`. • Maps Portkey metadata to Vertex AI resource labels and adds enterprise search grounding via `enterpriseWebSearch` / `enterprise_web_search` with separate cost attribution. • Enables AWS workloads to reach Vertex AI through AWS–GCP WIF using `GCP_WIF_AUDIENCE` and `GCP_WIF_SERVICE_ACCOUNT_EMAIL`. • Updates OpenTelemetry GenAI semantic spans to semconv 1.40.0, adds OTEL exporter support for guardrail flows, and supports custom resource attributes for downstream APM standardization. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://portkey.ai/docs/changelog https://portkey.ai/docs/changelog Fri, 17 Jul 2026 15:07:21 GMT Portkey adds vault-backed credentials, weekly rate limits, cross-cloud GCS logging, and four new guardrail integrations in March 2026. • New Secret References let you point Portkey at credentials stored in AWS Secrets Manager, Azure Key Vault, or HashiCorp Vault via `secret_mappings`, so keys are fetched at runtime from vaults you already control. • Adds weekly rate and budget windows (`rpw`) so spend caps align with weekly planning cycles rather than only per-minute or monthly aggregates. • Adds endpoint-scoped rate limits so chat completions, embeddings, and admin routes can each carry independent limits instead of a single global rule. • GCP Workload Identity Federation log delivery: configure `GCP_WIF_AUDIENCE` and `GCP_WIF_SERVICE_ACCOUNT_EMAIL` so an AWS-hosted gateway writes logs to GCS without long-lived GCP keys (`gcs_assume` style). • Organization admins can now include archived workspaces in analytics graphs and filters; saved filters also accept workspace slugs alongside IDs. • New Zscaler AI Guard integration applies Zscaler Detection Policies to LLM inputs and outputs via `beforeRequestHook` / `afterRequestHook` with a required `policyId`. • New Akto Agentic Security guardrail scans LLM inputs and outputs for prompt injection and sensitive data leakage with configurable hook and timeout. • Bedrock Guardrails plugin now accepts a `customHost` field to route guardrail evaluation to private or regional Bedrock-compatible endpoints. • New required metadata key–value guardrails block requests missing specified metadata fields before they reach the model. • DeepInfra provider adds tool calling (`tools`, `tool_choice`, `parallel_tool_calls`) plus completions and embeddings endpoints. • DeepSeek `deepseek-chat` gains `tools`, `tool_choice`, and `stream_options`; `deepseek-reasoner` maps `reasoning_effort` to thinking mode and returns `reasoning_content` in streams. • Bedrock batch inference now supports embeddings in addition to chat completions. • Vertex AI: Portkey metadata maps to Vertex resource labels; enterprise search grounding via `enterpriseWebSearch` / `enterprise_web_search`; AWS workloads reach Vertex via AWS–GCP WIF. • Azure AI Foundry gains Cohere rerank model support (e.g. `cohere.Cohere-rerank-v4.0-pro`); gateway strips the `cohere.` prefix for the provider. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://portkey.ai/docs/changelog https://portkey.ai/docs/changelog Mon, 13 Jul 2026 10:06:59 GMT Portkey adds vault-backed credentials, weekly rate limits, cross-cloud log delivery, and four new guardrail integrations in March 2026. • Adds Secret References so Portkey fetches credentials at runtime from AWS Secrets Manager, Azure Key Vault, or HashiCorp Vault via `secret_mappings`, keeping keys out of Portkey directly. • Supports weekly budget/usage windows (`rpw`) and endpoint-scoped rate limits, letting teams cap chat completions, embeddings, and admin routes independently. • Enables GCS log delivery from AWS-hosted gateways via GCP Workload Identity Federation (`GCP_WIF_AUDIENCE` / `GCP_WIF_SERVICE_ACCOUNT_EMAIL`), eliminating long-lived cross-cloud keys. • Allows organization admins to include archived workspaces in analytics graphs and filters, with workspace slugs accepted alongside IDs in saved filters. • Integrates Zscaler AI Guard as a guardrail partner, applying Zscaler Detection Policies to LLM inputs and outputs via `beforeRequestHook` / `afterRequestHook` with a required `policyId`. • Integrates Akto Agentic Security as a guardrail partner to scan for prompt injection and sensitive data leakage on agentic traffic. • Adds `customHost` on the Bedrock Guardrails plugin so guardrail evaluation can target private or regional Bedrock-compatible endpoints. • New required metadata key–value guardrails block requests at the gateway before they reach the model if required metadata fields are missing or invalid. • Adds DeepInfra provider support with tool calling (`tools`, `tool_choice`, `parallel_tool_calls`), completions, and embeddings endpoints. • Expands DeepSeek support: `deepseek-chat` gains `tools`, `tool_choice`, and `stream_options`; `deepseek-reasoner` maps `reasoning_effort` to thinking mode and returns `reasoning_content` in streams. • Extends Bedrock batch inference to support embeddings jobs alongside existing chat completion batch patterns. • Adds Vertex AI enterprise web search grounding via `enterpriseWebSearch` / `enterprise_web_search` with separate cost attribution, Portkey metadata mapped to Vertex resource labels, and AWS-to-Vertex access via WIF. • Supports Azure AI Foundry rerank with Cohere rerank models (e.g. `cohere.Cohere-rerank-v4.0-pro`), with the gateway stripping the `cohere.` prefix automatically. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/data-service#1-9-0 https://docs.portkey.ai/docs/changelog/data-service#1-9-0 Wed, 24 Jun 2026 00:00:00 GMT Redis multi-auth and discovery URL support; SSRF checks for external calls in Portkey Data Service 1.9.0 • Adds `REDIS_CLUSTER_DISCOVERY_URL` environment variable to enable Redis connection through Discovery URL. • Adds support for multiple auth modes in Redis improvements for Azure Redis. • Adds SSRF checks for external calls. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-12-0 https://docs.portkey.ai/docs/changelog/enterprise#2-12-0 Tue, 23 Jun 2026 00:00:00 GMT Portkey Enterprise Gateway 2.12.0 adds OTel guardrail spans, MCP/Agent token metering, Azure MAI image gen, and Vertex MoonshotAI support • Guardrail checks now emit dedicated OpenTelemetry spans under the `portkey.guardrail.*` namespace for phase, verdict, action, deny, async, and per-check events. • Token usage from MCP requests (prompts, completions, tools) is tracked and reported in analytics and logs alongside LLM usage. • Token usage from agent endpoints (messages and tasks) is tracked and reported in analytics and logs alongside LLM usage. • Image generation and editing are supported for MAI models (e.g., `MAI-Image-2.5`) on Azure AI Inference. • Vertex AI integration now supports the `moonshotai` model provider. • The `/dataservice/metrics` endpoint is gated behind the `ENABLE_PROMETHEUS` env flag, matching the behavior of the `/metrics` endpoint. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/backend#1-18-0 https://docs.portkey.ai/docs/changelog/backend#1-18-0 Tue, 23 Jun 2026 00:00:00 GMT Portkey Backend 1.18.0 adds saved-only mode, MiniMax provider, SCIM multi-workspace mapping, unified /models endpoint, and JWT agents.invoke scope. • Enables `block_inline_config` data-plane security setting to reject inline provider/endpoint/config selections in favor of admin-curated resources • Adds `BLOCK_INLINE_CONFIG=true` environment variable for self-hosted Gateways to force saved-only mode • Adds MiniMax (`minimax`) model provider to the Model Catalog with model and pricing configs • Expands SCIM integration: `GET /v1/scim/workspaces` now supports pagination (`page`, `page_size`, `total_count`) and groups can map to multiple workspaces • Removes `include_mapped_groups` filter from `GET /v1/scim/groups` as groups can now map to many workspaces • Adds `fetch_integrated_models` config flag and `x-portkey-models-endpoint` request header to fetch the integrated catalog model list through the Gateway • Adds `agents.invoke` data-plane scope for JWT tokens Breaking changes: • The `include_mapped_groups` filter is removed from `GET /v1/scim/groups` endpoint responses Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/frontend#1-9-3 https://docs.portkey.ai/docs/changelog/frontend#1-9-3 Mon, 22 Jun 2026 00:00:00 GMT Portkey Frontend v1.9.3 adds org-level Data Plane Security controls and Anthropic streaming retry support. • Added dashboard controls for Data Plane Security Settings at the organization and workspace levels • Added 'Catch Overloaded Errors on Stream' to Anthropic advanced configuration to convert streaming overloaded_error responses to retriable 529 errors Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-11-2 https://docs.portkey.ai/docs/changelog/enterprise#2-11-2 Wed, 17 Jun 2026 00:00:00 GMT Adds x-portkey-fetch-integrated-models header to override models API routing, MCP metrics-only logging, and S3 log store circuit breaker via env vars. • Adds the `x-portkey-fetch-integrated-models` HTTP header and `fetch_integrated_models` config field to force `GET /v1/models` to return gateway-configured models regardless of routing signals • Introduces metrics-only logging mode for the MCP gateway, dropping request/response bodies from persisted logs while retaining span info and preserving response bodies on failures Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-11-1 https://docs.portkey.ai/docs/changelog/enterprise#2-11-1 Fri, 12 Jun 2026 00:00:00 GMT v2.11.1 updates Bedrock Guardrails action handling, cost attribution, and SSRF validation. • `Guardrails` now only block requests when the `action` field is explicitly `blocked`, allowing non-blocking actions to pass through. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-11-0 https://docs.portkey.ai/docs/changelog/enterprise#2-11-0 Wed, 10 Jun 2026 00:00:00 GMT Portkey Enterprise Gateway 2.11 adds MiniMax support, Enforce Inline Config flag, and OAuth forwarding for Claude Code. • Adds `minimax` provider for chat completions with MiniMax’s hosted models • Modal integration now supports `/v1/embeddings` alongside chat completions • Anthropic chat completions pass `context_management` through to the upstream API • Enforces inline configs with a new flag that rejects requests passing an inline `config` JSON object instead of a saved config slug Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-10-0 https://docs.portkey.ai/docs/changelog/enterprise#2-10-0 Sat, 30 May 2026 00:00:00 GMT Enterprise Gateway 2.10.0 adds Claude Platform on AWS, Cato guardrail, multi-dimensional pricing, Prometheus labels, and SSRF hardening. • Adds `claude-platform-aws` provider with `accessKey`, `assumedRole`, and `serviceRole` auth modes for Anthropic’s full-platform capabilities through AWS • Adds Cato Networks guardrail plugin for AI security inspection of LLM prompts and responses via Cato’s analyze API • Adds `PROMETHEUS_INCLUDE_CONFIG_NAME_LABEL` and `PROMETHEUS_INCLUDE_API_KEY_NAME_LABEL` environment flags to attach config slug and API key name as labels on custom metrics • `default.allowedRequestTypes` guardrail now runs as a `beforeRequestHook` on proxy requests • Adds `otel` to the plugin manifest allow list to permit OpenTelemetry export via guardrail config • `guard_chat_completions` requests to CrowdStrike AIDR now forward `user_id`, `user_name`, `llm_provider`, and `model` metadata • Vertex AI integration adds support for the `zai-org` model provider on chat completions • Forwarding OpenAI-style `service_tier` as the upstream Vertex header for tiered inference usage attribution Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/frontend#1-9-2 https://docs.portkey.ai/docs/changelog/frontend#1-9-2 Wed, 27 May 2026 00:00:00 GMT Portkey Frontend 1.9.2 improves self-hosting configuration via a new environment variable and reorganizes default workspace API key settings to the organisation level. • Adds `VITE_PRESELECT_LOGIN_PERMISSION` environment variable to pre-select the login permission checkbox on private deployments Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/backend#1-17-0 https://docs.portkey.ai/docs/changelog/backend#1-17-0 Tue, 26 May 2026 00:00:00 GMT Adds Cato Networks guardrail, prompt sharing APIs, and org-level API key auto-create settings • Introduces Cato Networks guardrail with `cato.analyze` action supporting monitor, anonymize, or block with `userEmail`, `keyAlias`, and `timeout` options. • Adds `guardrails.invoke` scope for workspace-service and workspace-user API keys. • Exposes prompt sharing via new workspace-scoped APIs: `POST/PUT/DELETE /v2/prompts/:id/share`, `/fork`, and `/unshare`. • Lists endpoints now support `type=shared` and `show_prompt_share` query parameters for filtering shared prompts. • Config create/update schema validates `default_params` and `drop_params` on targets in addition to `override_params`. • Adds org-only setting `default_workspace_user_api_key_auto_create` to control auto-provisioning of workspace-user API keys. • API key rotation enforcement `user_api_key_rotation_period` now accepts days only (integer 1–365), normalizing old `weekly`/`monthly` values. Breaking changes: • Deprecated organisation-level prompt/partial routes removed; use workspace-scoped APIs instead. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-9-0 https://docs.portkey.ai/docs/changelog/enterprise#2-9-0 Thu, 21 May 2026 00:00:00 GMT Enterprise Gateway 2.9.0 adds default/drop params, new providers, Lakera guardrails, and native Azure Responses API • Adds `default_params` and `drop_params` config fields to Config Targets for conditional injection and removal of request parameters by dot-notation path. • Integrates Fal AI provider (`fal-ai`) for image, video, and audio generation models. • Integrates BytePlus provider (`byteplus`) for chat completions. • Integrates Scenario AI provider (`scenario-ai`) with proxy passthrough support for Basic auth using `apiKey` and optional `scenarioApiSecret`. • Adds Lakera Guard as a guardrails partner via `/v2/guard` API, supporting `beforeRequestHook`/`afterRequestHook`, PII redaction, and optional `project_id`/`apiBase`. • Enables per-region Vertex AI endpoints for batches, Gemini Embedding 2 embeddings, Anthropic Claude on Vertex, and Gemini models. • Adds support for Anthropic Claude models via the unified `/v1/batches` API on Vertex AI. • Unlocks Azure AI Foundry native Responses API (`/v1/responses`) behind a flag for agent references and transformations. • Supports OpenAI-style `service_tier` parameter in Amazon Bedrock provider requests with correct usage attribution. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/frontend#1-9-1 https://docs.portkey.ai/docs/changelog/frontend#1-9-1 Thu, 21 May 2026 00:00:00 GMT Frontend 1.9.1 adds Azure Workload Identity configuration via dashboard and improves API key rotation UX. • Adds `azureWorkloadClientId` and `azureWorkloadTenantId` config fields in the dashboard to enable Azure Workload Identity for OpenAI and AI Foundry integrations • Improves input field and validation error messaging for Org service API key rotation Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/frontend#1-9-0 https://docs.portkey.ai/docs/changelog/frontend#1-9-0 Wed, 20 May 2026 00:00:00 GMT Frontend 1.9.0 adds org workspace publishing, CSV variable import/export, Scenario AI provider support, and a 'Shared with me' tab. • `Publish to org or selected workspaces` for prompt and partial sharing to control visibility • 'Shared with me' tab displays org-wide shared prompts and partials • Export prompt variables as CSV (`name`, `type`, `value`) and import from CSV in bulk • New provider `Scenario AI` added Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/data-service#1-8-0 https://docs.portkey.ai/docs/changelog/data-service#1-8-0 Wed, 20 May 2026 00:00:00 GMT Data Service 1.8.0 adds provider batch guardrails and opt-in Bull Board dashboard. • Adds `input_guardrails` and `output_guardrails` config keys inside `portkey_options` to enable redaction/filtering on provider batches. • Adds `BULL_BOARD_ENABLED=true` environment variable to enable the Bull Board queue dashboard (disabled by default). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/backend#1-16-2 https://docs.portkey.ai/docs/changelog/backend#1-16-2 Tue, 19 May 2026 00:00:00 GMT Portkey Backend 1.16.2 adds Lakera Guard support, workspace API key defaults, batch API key lookup, and SSRF hardening. • Adds `Lakera Guard` integration via `/v2/guard` endpoint for prompt injection, policy violation, and PII detection with `projectID`, `endInclusive`, and `timeout` config options • Adds `fal.ai` provider to the Model Catalog under the `fal-ai` identifier for OpenAI-compatible inference across LLM, image, video, and audio models • Allows setting `defaults.user_api_key_config` via `PUT /v2/workspaces/:id` to define a default config slug for auto-created or fallback workspace-user API keys, with validation preventing deletion of the active default • Extends `isValidCustomHost` validation across organisation settings, deployments, providers, virtual keys, MCP integrations, integration-model `custom_host`, and SAML ACS URLs to block private/reserved IPs, metadata endpoints, non-HTTP(S) schemes, URL fragments, and other unsafe targets • Enables hardening of OIDC PKCE flows for SSO authentication and ensures JWT user attribution correctly resolves user email and enforces workspace membership • Adds `ids` query parameter support to `GET /v2/api-keys` for batch lookup via comma-separated UUIDs • Validates `byteplus_region` in the integrations API for the BytePlus provider integration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-8-0 https://docs.portkey.ai/docs/changelog/enterprise#2-8-0 Thu, 14 May 2026 00:00:00 GMT Portkey Enterprise Gateway 2.8.0 adds Tavily guardrails, MCP CORS controls, Azure Workload Identity, and Vertex AI TTS support. • Adds `Tavily Online Guardrail Plugin` for web-grounded checks in guardrail pipelines • Enables Vertex AI Gemini TTS via unified speech APIs (`createSpeech` / `generateSpeech`) through gateway routes • Updates Bedrock Mantle prompt cache pricing to include `1-hour` cached context cost path • Extends Workload Identity support for Azure OpenAI, Azure AI Foundry routes and adds it as an authentication option for Azure Cache for Redis • Introduces a new usage limit policy type for finer-grained consumption control • Adds environment flags to tune CORS response headers for MCP endpoints in self-hosted deployments • Extends Prompt Security checks with additional coverage and provider-specific configuration hooks • Refreshes Beta header forwarding and filtering across providers • Supports `provider slug references` for circuit breaker target resolution Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/backend#1-16-1 https://docs.portkey.ai/docs/changelog/backend#1-16-1 Thu, 14 May 2026 00:00:00 GMT Portkey 1.16.1 adds SSRF-hardened Agent Gateway fetching, batches output file ID support, and service-to-service config auth • `POST /v2/agent-integrations/fetch-agent-card` now validates upstream endpoints against SSRF vectors (private IPs, cloud metadata, non-HTTP(S), fragments) and enforces valid JSON `{url, name}` responses under 1 MB • Agent card discovery is restricted to `/.well-known/agent-card.json` and `/.well-known/agent.json`, removing the previous fallback to the raw base endpoint • `PUT /v2/batches/:id` now accepts `internal_output_file_id` for the guardrails-on-batches pipeline, supported by a new internal column on batches records • `GET /v2/configs` now supports data-service token authentication for service-to-service configuration reads Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/backend#1-16-0 https://docs.portkey.ai/docs/changelog/backend#1-16-0 Wed, 13 May 2026 00:00:00 GMT Portkey Backend 1.16.0 adds Tavily guardrail, Azure Workload Identity, requests usage-limit policy type, and configurable API key rotation. • Adds `Tavily Online Search` guardrail with configurable search parameters to inject web results into prompts • Adds `workload` auth mode for Azure OpenAI and Azure AI Foundry integrations requiring `azure_workload_client_id` and `azure_workload_tenant_id` • Adds `entraFederated` auth mode for Azure AI Foundry integrations • Adds `requests` as a new `usage-limits` policy type alongside `cost` and `tokens` • Allows `PUT /v2/policies/usage-limits/:id` and `PUT /v2/policies/rate-limits/:id` to accept `conditions` in the request body • Adds `rotation_period_days` (1–365) to API key rotation policies alongside existing `rotation_period` • Honours `NO_PROXY` environment variable for outbound LLM, OIDC, and Mailgun calls • Adds `REQUEST_TIMEOUT` config for outbound fetch timeout in milliseconds Breaking changes: • `GET /v1/auth/self` now requires a session/JWT and rejects requests authenticated only with an API key • Legacy endpoints `/users/firebase-custom-token` and `/utils/oidc-client-id` have been removed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/frontend#1-8-2 https://docs.portkey.ai/docs/changelog/frontend#1-8-2 Tue, 12 May 2026 00:00:00 GMT Portkey Frontend 1.8.2 adds auto API key creation, budget reset, and policy condition updates. • Adds the ability to automatically create an API key for an organisation and workspace • Adds the ability to reset usage for budget allocation • Enables conditions update for policy updates Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/data-service#1-7-1 https://docs.portkey.ai/docs/changelog/data-service#1-7-1 Tue, 12 May 2026 00:00:00 GMT Portkey Data Service adds Azure Blob Storage backend and FIPS-compliant Dockerfile variant in v1.7.1 • Adds `Azure Blob Storage` as a log-export storage backend alongside existing S3 options. • Adds `FIPS-compliant` Dockerfile variant for data-service with FIPS mode enabled and SHA-256 signing. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/backend#1-15-0 https://docs.portkey.ai/docs/changelog/backend#1-15-0 Mon, 04 May 2026 00:00:00 GMT Portkey Backend v1.15 adds auto-generated API keys, custom key rotation, passthrough configs, and granular agent RBAC. • Adds `user_api_key_auto_create` organization setting to automatically provision default workspace-user API keys on member join or invite acceptance • Adds `user_api_key_rotation_period` organization setting to enforce automatic API key rotation for workspace-user keys • Adds `rotation_period_days` column to `rotation_policies` and exposes `periodic_reset_days`, `next_usage_reset_at`, and `last_reset_at` fields on usage limit policies • Adds `API_KEY_PREFIX` environment variable to prefix all newly-generated Portkey API keys in self-hosted deployments • Adds `pricing_adjustments.multiplier` config to integrations for per-token markup/discount multipliers • Allows setting `models[].configurations.custom_host` per integration model via `PUT /integrations/:id/integration-models` • Supports `value_format: json` in `secret_mappings` to parse stringified JSON values • Adds support for `secret_mappings` on MCP integrations with resolution at request time • Adds `azure_auth_mode: entraFederated` mode for Azure OpenAI integrations, requiring `azure_entra_tenant_id` and `azure_entra_client_id` without a client secret • Seeds new `bedrock-mantle` provider for AWS's OpenAI-compatible Bedrock inference engine • Adds `allow_subdomains` flag to SSO settings to resolve users from subdomains of an allowed root domain • Extends `POST /v1/scim/workspaces` to accept `scim_group_name` in addition to `scim_group_id` • Adds `organisationAdminsViewLogs` and `organisationAdminsViewLogMetadata` organization settings to control org admin access to request logs and metadata • Allows configs to set `passthrough: true` to mark requests as passthrough mode without provider transformation • Adds `matchType` parameter (exact, contains, containsAll, regex) for guardrails metadata key-value comparison • Makes `/models` route accessible to all workspace roles and renames output field `total` to `total_count` • Adds granular RBAC scopes: `organisation_agent_integrations.*`, `workspace_agent_integrations.*`, `agent_servers.*`, `agent_server_skills.*`, `agent_integration_skills.*`, `agent_server_user_access.*`, and `agents.invoke` • Adds `GET /v1/agent-servers/:id/agent-card` endpoint to fetch the upstream agent card Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-7-1 https://docs.portkey.ai/docs/changelog/enterprise#2-7-1 Thu, 30 Apr 2026 00:00:00 GMT Portkey Enterprise Gateway 2.7.1 adds `anthropicInspectStreamForOverloadedError` to handle Anthropic streaming errors. • Adds `anthropicInspectStreamForOverloadedError` configuration key to inspect the first chunk of an Anthropic streaming response and return HTTP `529` on `overloaded_error`, enabling proper retry/fallback logic Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-7-0 https://docs.portkey.ai/docs/changelog/enterprise#2-7-0 Thu, 30 Apr 2026 00:00:00 GMT Portkey Gateway v2.7 adds Vertex AI Rerank, Bedrock Mantle provider, MCP secret support, and Sigstore image signing • Adds `bedrock-mantle` provider for AWS OpenAI-compatible Bedrock inference with `apiKey`, `assumedRole`, and `serviceRole` auth modes via `/v1/chat/completions`, `/v1/responses`, and `/v1/messages` • Supports Vertex AI Rerank on the unified `/v1/rerank` endpoint using `semantic-ranker-default`, `semantic-ranker-fast`, or `semantic-ranker-512` models • Adds `matchType` parameter to Required Metadata Key-Value Pairs guardrail supporting `exact`, `contains`, `containsAll`, and `regex` comparison behaviors • Enables MCP integrations to reference centrally-managed secrets via `secret_mappings` in the integration config, resolved at connection time • Adds `value_format: json` support for Secret Mappings to parse stringified JSON into target fields for structured credentials • Allows integration-level cost multipliers via `pricing_adjustments.multiplier` config key for per-integration markup or discount pricing • Outputs signed Docker images using Sigstore Cosign, verifiable against Portkey’s public key before deployment • Extends `SEMANTIC_CACHE_EMBEDDING_PROVIDER` to accept `google` and `vertex-ai` values alongside `openai` for semantic cache population Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/frontend#1-7-6 https://docs.portkey.ai/docs/changelog/frontend#1-7-6 Fri, 24 Apr 2026 00:00:00 GMT Frontend 1.7.6 adds guardrail pagination, Azure OpenAI/Foundry secret reference integration, and performance fixes • `Guardrail List` page now supports pagination to handle large numbers of guardrails. • Secret Reference Integration support for `Azure OpenAI` and `Azure Foundry` setup inside LLM Integrations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/frontend#1-7-5 https://docs.portkey.ai/docs/changelog/frontend#1-7-5 Wed, 22 Apr 2026 00:00:00 GMT Frontend 1.7.5 adds Org/Workspace log management permissions and granular guardrail view/write toggles • Adds Org-Admin permissions for Logs Management at both Org level and Workspace level • Adds per-role view and write toggles for Guardrail Management security settings with workspace-level override Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-6-2 https://docs.portkey.ai/docs/changelog/enterprise#2-6-2 Fri, 17 Apr 2026 00:00:00 GMT Portkey Gateway 2.6.2 adds MCP header renaming, Azure Entra federated auth, and Gemini Embedding 2 support • `forward_headers` entries now accept `{ from, to }` objects to rename client headers before they reach the upstream. • Adds `entraFederated` auth mode for Azure OpenAI/AI Foundry to exchange AWS web identity tokens for Entra ID access tokens. • `gemini-embedding-2-preview` is now available on the unified `/v1/embeddings` route for Vertex AI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/frontend#1-7-4 https://docs.portkey.ai/docs/changelog/frontend#1-7-4 Thu, 16 Apr 2026 00:00:00 GMT Portkey Frontend 1.7.4 adds Logs Path variable in UI, Metadata to Vertex Labels mapping, custom model host provisioning, and Entra-Auth federated support for Azure. • `Logs Path` variable is now available in the UI • Maps Portkey Metadata to Vertex Labels for better observability • Enables federated auth support for Entra-Auth for Azure Integrations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/frontend#1-7-3 https://docs.portkey.ai/docs/changelog/frontend#1-7-3 Tue, 14 Apr 2026 00:00:00 GMT Adds UI support for Integrations-specific Security Settings and Policy type exclusion in Frontend 1.7.3 • Updates UI to support excluding `Policy` types Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-6-1 https://docs.portkey.ai/docs/changelog/enterprise#2-6-1 Tue, 14 Apr 2026 00:00:00 GMT Adds Anthropic Batch API support, sensitive header masking, Bedrock reasoning effort, and Agent Gateway preview • Adds `/v1/batches` endpoint for running asynchronous Claude jobs via the Anthropic Batch API • Adds `x-portkey-sensitive-headers` request header to mask matching values in logs and traces • Adds support for `reasoning_effort` parameter (minimal/low/medium/high/none) for Bedrock Claude reasoning models, mapped to `thinking.budget_tokens` on earlier models • Adds experimental `/v1/agent/:agentServerId/*` proxy route for Agent Gateway preview with A2A-registry support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/backend#1-14-0 https://docs.portkey.ai/docs/changelog/backend#1-14-0 Sun, 12 Apr 2026 00:00:00 GMT Portkey Backend 1.14.0 introduces API key rotation, MCP connection APIs, Lasso classifier, and HADB MySQL support • API Key Rotation is generally available; use `*.rotate` scope for organization-service, workspace-service, and workspace-user API key types to enable rotation • Added organization security settings `managersWriteWsIntegrations`, `managersWriteWsMcpIntegrations`, and `managersWriteMcpServers` with default enabled and workspace-level overrides to control manager write access • New `GET /v1/mcp-servers/:mcpServerId/connections` API for paginated list of user connections to an MCP server • New `DELETE /v1/mcp-servers/:mcpServerId/connections` API to revoke a specific user's connection to an MCP server • Added configurable MySQL reader with HADR mode using new env vars `DB_READER_HOST`, `DB_READER_USER`, `DB_READER_PASS`, `DB_READER_PORT` and `MYSQL_WRITER_HADR_MODE=ON` for writer failover • Added new `lasso.classify` check to Guardrails Lasso integration with optional `apiEndpoint` field for self-hosted deployments Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-6-0 https://docs.portkey.ai/docs/changelog/enterprise#2-6-0 Wed, 08 Apr 2026 00:00:00 GMT Portkey Enterprise Gateway v2.6.0 adds Vertex AI label mapping, custom model host routing, MCP timeout/env vars, and data URL support. • Adds automatic mapping of Portkey `metadata` to Vertex AI resource labels across chat/completions, embeddings, batches, and fine-tuning with configurable `METADATA_MAP_KEY_PREFIX` environment variable • Enables `custom_host` routing in model config for custom models, allowing different upstreams per model under the same integration while respecting header-level priority • Adds support for base64 data URLs (format: `data:<media_type>;base64,<data>`) in `file.file_data` via `/chat/completions` to forward as Anthropic document content • Enables passthrough of top-level `cache_control` parameter to Anthropic in `/chat/completions` and adds automatic `additionalProperties: false` for strict structured outputs • Adds configurable outbound timeout for MCP calls via `MCP_REQUEST_TIMEOUT_MS` environment variable and updates `MCP_POOL_*` env var precedence with new log attributes `gateway_version` and `mcp.auth.upstream_token_refreshed` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-5-1 https://docs.portkey.ai/docs/changelog/enterprise#2-5-1 Wed, 01 Apr 2026 00:00:00 GMT Output guardrails now apply to streaming responses for /chat/completions, /completions, and /messages endpoints. • Adds `output_guardrails` and `after_request_hooks` support for streaming responses via SSE chunks at stream end Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/frontend#1-7-0 https://docs.portkey.ai/docs/changelog/frontend#1-7-0 Wed, 01 Apr 2026 00:00:00 GMT Frontend 1.7.0 adds Gateway Registration, API Key Rotation UIs, Anthropic Cache TTL support, Akto AI plugin, and enhanced Trace View filtering. • `Gateway Registration` UI added for configuring gateway connections • `API Key Rotation` UI added for managing key lifecycle • New `Last Reset Date` field displayed in Integrations, Providers, API Keys, and Workspace Budgets views • Trace View now supports displaying spans without active filters via a new toggle UI element • Added configuration option for Anthropic Cache TTL from Playground/Prompts settings • Organisation-level maximum session time setting now supported for user management • Akto AI added as a supported plugin within the system Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/backend#1-13-0 https://docs.portkey.ai/docs/changelog/backend#1-13-0 Wed, 01 Apr 2026 00:00:00 GMT Portkey Backend v1.13.0 adds API key rotation, organization session management, Required Metadata guardrails, and Agent Gateway CRUD APIs. • Adds automatic and manual `API key rotation` with `rotation_policy` config (`rotation_period`, `next_rotation_at`, `key_transition_period_ms`) and new `POST /api-keys/:apiKeyId/rotate` endpoint • Adds `session_settings` organization-level auth configuration with `max_session_ttl` to reject expired user sessions • Adds `Required Metadata Key-Value Pairs` guardrail (`default.requiredMetadataKeyPairs`) with `metadataPairs` and `operator` parameters in `beforeRequestHook` • Adds `rpw` (requests per week) rate limit unit and `endpoint_type` condition key for granular rate limiting • Adds `Agent Gateway` with full CRUD APIs, agent skills management, workspace-level access control, and RBAC support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-5-0 https://docs.portkey.ai/docs/changelog/enterprise#2-5-0 Wed, 01 Apr 2026 00:00:00 GMT Gateway-Local JWT auth via JWT_ENABLED, HEADERS_TO_METADATA injection, weekly rate limits, metadata guardrail, Lasso v3 API, HEIC/HEIF images • Adds `JWT_ENABLED=ON` environment variable to enable gateway-local JWT validation and support resolving Organisation ID from `portkey_oid` or `organisation_id` claims. • Adds `HEADERS_TO_METADATA` environment variable to inject request headers into metadata for observability enrichment without client-side `x-portkey-metadata` changes. • Adds weekly window rate limiting via `rpw` and endpoint type targeting via `endpoint_type` condition key in rate limit policies. • Adds native `metadataPairs` guardrail check with `all`, `any`, and `none` operators to validate metadata before request processing. • Upgrades Lasso Security integration to v3 API Classify, enabling structured findings-based detection, session/user tracking via `sessionId`/`userId`, and configurable `apiEndpoint`. • Adds support for `image/heic` and `image/heif` MIME types in multimodal requests and the Inline Image URLs guardrail. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-4-4 https://docs.portkey.ai/docs/changelog/enterprise#2-4-4 Wed, 25 Mar 2026 00:00:00 GMT Portkey Enterprise Gateway 2.4.4 adds Anthropic Files API support via /v1/files, cache TTL, and OTel semconv alignment. • Adds `EXPERIMENTAL_GEN_AI_OTEL_RESOURCE_ATTRIBUTES` environment variable for custom OTLP resource attributes • Supports the `/v1/files` endpoint for Anthropic Files API integration • Adds optional `ttl` field to `cache_control` (values "5m" or "1h") for Prompt Caching Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-4-3 https://docs.portkey.ai/docs/changelog/enterprise#2-4-3 Tue, 17 Mar 2026 00:00:00 GMT Portkey Enterprise Gateway 2.4.3 adds MCP event observability and Prometheus env var support • Adds `PROMETHEUS_INCLUDE_MODEL_LABEL`, `PROMETHEUS_INCLUDE_METADATA_LABELS`, `PROMETHEUS_HISTOGRAM_BUCKETS`, `PROMETHEUS_HTTP_DURATION_BUCKETS`, and `PROMETHEUS_GC_BUCKETS` environment variable support for configuring Prometheus metrics. • Enhances MCP Gateway logging to capture all MCP events, including caller identity, authorization scope, decision, and gateway `trace_id`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey https://docs.portkey.ai/docs/changelog/enterprise#2-4-2 https://docs.portkey.ai/docs/changelog/enterprise#2-4-2 Mon, 16 Mar 2026 00:00:00 GMT Enterprise Gateway v2.4.2 adds native Bedrock structured output enforcement via Converse API's json_schema. • Bedrock structured outputs now use `outputConfig` with `json_schema` text format via the Converse API for Claude models on Bedrock Full history on Cyber Toolchain: https://cybertoolchain.io/tools/portkey