August 2026
- Added the hosted Streamable HTTP endpoint at
https://mcp.goautofire.com/mcp. - Added dealership-scoped bearer keys with 30-, 60-, and 90-day expiration and immediate revocation.
- Added owner/admin key management in the AutoFire dashboard.
- Added read-only dealership, inventory, lead workflow, lead contact, test-drive, and insight tools.
- Added masked lead lists, separate lead-PII permission, tenant-enforced database functions, layered rate limits, and PII-free tool auditing.
- Added Codex, Claude Code, generic client, security, and troubleshooting documentation.
- OAuth discovery remains disabled pending the hosted authorization rollout.