Connecting an MCP client to Hedy is about a second quicker, and the Zapier session listing is now bounded.
  • MCP OAuth discovery advertises the scopes the server actually supports,
    mcp:read
    and
    mcp:write
    , instead of reading every registered client on each request. No client's granted permissions change.
  • Worth checking if you built on it:
    GET /v1/sessions?format=zapier
    with no
    limit
    or
    after
    used to return every session in one response. It now returns at most 100, newest first, and that response format carries no
    hasMore
    flag. If your automation relied on one unbounded call, page it with
    limit
    and
    after
    .