Changelog
November 4, 2026
MCP server: device sign-in
Clients that cannot open a browser (remote shells, CI, headless agents) can now sign in to the MCP server with the OAuth device flow: you approve a short code at tessforth.com/oauth/device.
October 21, 2026
TypeScript SDK 2.3
issues.listAll() iterates over every page for you, and errors returned inside GraphQL responses now throw TessforthError with their code (RATELIMITED, QUERY_TOO_COMPLEX, INVALID_INPUT).
October 7, 2026
EU data residency for existing workspaces
Business workspaces created in the US region can now ask to be moved to Frankfurt.
September 16, 2026
Webhook signatures
Every webhook delivery is signed with HMAC-SHA256 in the Tessforth-Signature header.
August 26, 2026
Audit log on Business
Admins on Business can review a year of security events in Settings > Security.