What's new in StackTether
Short answer: StackTether went live at app.stacktether.com with version 0.4.0: sign-in with 2FA, invite-only accounts, Kaseya BMS and Autotask connections, OAuth sign-in for AI apps, AI safeguards and an audit log of every tool call. Below are the changes that matter to MSP admins and techs, newest first.
0.4.0 (21 October 2026)
- StackTether is live, with every go-live check passed, including AI apps staying connected after long idle periods.
- New logo across the sign-in pages and portal.
- When a PSA request runs out of time, the AI is always told "The PSA took too long to answer".
0.3.7 (20 October 2026)
- Signing in to the portal with 2FA, signing out, or changing networks no longer disconnects AI apps.
- Claude no longer asks you to approve again after about 15 idle minutes.
- When a call budget runs out, the AI is told how long to wait and what to do instead; each budget has its own reason in the audit log. Each tech's hourly PSA share is now 1,000 requests.
- One page per member: role, sign-in actions, vendor access, AI apps, history and delete in one place.
- AI apps per person: admins can turn an app off for one member.
- Perplexity and Grok can connect (off until an admin turns them on).
- Invites are emailed automatically, with Resend and a backup link.
- The audit log shows which AI app made each call.
- "Connect your AI app" panel with the connector address and steps per app.
- Gemini Enterprise client credentials per MSP under AI access.
- Newest-first searches on Autotask no longer refuse very large sets.
- Retention: unused logins are deleted after 30 days, closed invites after 90, logs kept 1 year.
0.3.6 (19 October 2026)
- Each tech has their own share of PSA requests so one person cannot use up the MSP's allowance.
- Password reset and email confirmation links fixed.
0.3.5 and earlier (16 to 18 October 2026)
- Security review fixes; a fresh 2FA code required to delete a user or reset someone's 2FA or password.
- AI connection safeguards: Claude limited to Anthropic's network, 15-minute tokens, idle disconnect, kill switches, unusual-activity checks, country list and travel overrides.
- Per-person vendor access and per-MSP AI app switches.
- OAuth sign-in for AI apps with a 2FA consent page.
- Audit log of every tool call.
- Vendor credentials stored encrypted after a passing test; primary and secondary PSA.
- Invite-only accounts, roles, account recovery, wrong-password lockout.
- The full set of read-only PSA tools for Kaseya BMS and Autotask, plus ChatGPT search and fetch.