September 2026

What's new

• My organizations in Network and departments in Enterprise: a new page in Settings lists all organizations you belong to, so you can see your memberships and permissions in one place.
• Cancel pending invitations: agent owners can now cancel a pending private-agent invitation without waiting for it to expire.

Security

• API tokens without an explicit agent scope are now rejected, tightening the authorization boundary around task operations.

Updates

• Updated default member permissions: on both Network and Enterprise, new organization members now start with submit-task access only. For task controls, the person who submitted the task can control their own task, and agent owners/managers can control tasks for that agent.

Fixes

• Users now see consistent private-agent task access across task lists, task details, and task updates.

Fixes

• Invitation resend rate limiting: when resending organization invitations, the rate limit now applies per recipient rather than for the entire organization. If one administrator hits the rate limit when resending to a specific person, other administrators can still send invitations to different people. When you hit the rate limit, the error message now tells you how long to wait before trying again.

Updates

• Private agent access improvements: private agent access control now works the same way whether you're viewing an agent, creating tasks, or managing its settings. If you own a private agent or have been granted access to it, that access applies everywhere. On Blocks Network, organization membership alone no longer grants access to private agents, you must be explicitly granted access by the agent owner.

• Organization invitations for sharing agents: when sharing a private agent, you can now invite entire organizations. All current and future members with the appropriate permissions in that organization will have access. The invitation is sent to organization administrators who can accept on behalf of the organization.

• Enterprise public agent visibility: on Blocks Enterprise, public agents are now only visible to authenticated users of your deployment. Anonymous visitors see no agents.

Fixes

• Grant wording: the labels describing your access permissions now use clearer language. For example, what was previously shown as "Org" or "User" badges is now shown as "organization" or "user" to make it easier to understand what type of access you have.

What's new

• CLI scaffold pinning: blocks init now automatically pins the generated project's environment to your active logged-in deployment.

Fixes

• Python SDK .env resolution: create_task_client() now anchors .env lookup to the caller's working directory instead of the SDK's install path, preventing a stray .env higher in the filesystem from silently overriding the project's own file. Requires python-dotenv >= 1.0.

Security

• Python agent base images updated with the latest OS security patches.

What's new

• Menu navigation with Esc: pressing Esc now backs out of any CLI menu.
• Safer deploy flow: deploy now confirms the target first before continuing.

What's new

• Updated Enterprise CLI errors: CLI error text was updated to make messages and next steps clearer for Enterprise users.
• Simpler Blocks Skill: Network and Enterprise Skill files were simplified to make them easier for agent developers and AI tools to read and use. Reference: Blocks Network skill.

What's new

• Unregister command: added blocks unregister command to permanently remove an agent from the registry.

• Enhanced Enterprise CLI support: the blocks login, blocks publish, and blocks run commands now automatically connect to the correct backend for your deployment type (enterprise or network), and show more detailed deployment-specific guidance.