What's New

Each organization now has its own MCP URL — https://api.superkabe.com/mcp/<your-org-slug>. The dashboard API & MCP tab shows the right URL for your org; agencies running multiple Superkabe orgs from one Claude.ai account can add each as a separate connector and pick per conversation. No more revoke/re-authorize churn when switching between client orgs.

• OAuth grants are now audience-bound to the URL slug. Presenting an Acme token at /mcp/beta returns 403 — no cross-org cross-talk.
• Consent screen names the target org ("Authorize Claude for Acme Inc.") so the user always sees which org they're binding before approving.
• Per-slug RFC 9728 metadata at /.well-known/oauth-protected-resource/mcp/<slug>. Discovered via WWW-Authenticate header on every /mcp/<slug> probe.
• Bare /mcp still works for back-compat — existing single-org connectors keep working with no changes required.

Read the Claude (MCP Server) docs.

Claude.ai (browser) can now connect to Superkabe directly. Grab your per-org URL from Dashboard → API & MCP (looks like https://api.superkabe.com/mcp/<your-slug>) and paste into Claude.ai → Settings → Integrations → Add Integration. The OAuth flow handles consent, scoping, and token issuance entirely in-browser — no API key copy/paste, no install. The 17 Superkabe tools become available in any Claude conversation immediately.

• Full RFC 6749 / 7591 / 7636 / 8414 / 9728 implementation — Dynamic Client Registration, PKCE, RFC 9728 protected-resource metadata.
• Consent UI at /oauth/consent with explicit scope review.
• Active grants visible at /dashboard/integrations as a new Claude card. Disconnect with one click.
• Access tokens 1-hour TTL, refresh tokens 90-day, both hashed at rest.

Read the Claude (MCP Server) docs.

• GET /api/oauth/connections — list active OAuth grants for the org.
• POST /api/oauth/connections/revoke — disconnect by client_id or all at once.
• Powers the Claude card on the Integrations page. Refresh-token rotation deduped by client.

New "AI Assistants" group on the Integrations dashboard with a Claude card. Flips to "Connected" once you authorize via claude.ai. Manage button links straight to the API & MCP page. Official Anthropic, HubSpot, and Salesforce brand SVGs served from /brands/.

All paid tiers (Starter, Pro, Growth, Scale) now show + API in the credits feature line. JSON-LD descriptions and FAQ updated to match. /pricing.

Personal Gmail signups now successfully reach the "Name your organization" step. The /onboarding route is on the public-pages allowlist in the Next.js middleware so unauthenticated users with only the pending_token cookie aren't bounced to the landing page.

Every ToS and Privacy acceptance is now recorded with version numbers, timestamps, and IP. Re-acceptance modal fires when a new version ships. Powers GDPR / data-rights reporting at /dashboard/data-rights.

Closed 11 audit gaps across the lead protection pipeline: tighter dual-enrollment detection, sharper held-state transitions, cleaner per-mailbox risk caps for YELLOW leads. See Risk Scoring.

Healing pipeline (Pause → Quarantine → Restricted Send → Warm Recovery → Healthy) hardened across 18 audit findings: stricter graduation criteria, cleaner phase-transition events, better Slack alert context. See Warmup & Recovery.

All 69 blog posts and product pages converted to a unified centered-column layout with sticky left TOC, brand-cream background (#F7F2EB), and a dark CTA strip. Faster to scan, consistent across the site.

Replaced the legacy ItemList nesting with the canonical SoftwareApplication + AggregateOffer JSON-LD pattern (lowPrice $0, highPrice $349, offerCount 5). Each tier has its own UnitPriceSpecification with billingDuration: P1M. Better for Google rich-result eligibility and AI-overview citation.

• Smartlead alternatives
• Instantly alternatives
• EmailBison alternatives
• Woodpecker alternatives
• Lemlist alternatives
• Cheapest cold email tools of 2026
• Top 7 cold email tools of 2026

IndexNow protocol implemented for instant Bing/Yandex indexation on publish. Bing Webmaster Tools verification + sitemap.xml registered. Marketing pages now picked up within hours instead of days.

Eight blog posts and the platform-rules doc updated to reflect the actual threshold: 3% bounce rate after 60+ sends, with a 5-bounce safety net for low-volume mailboxes. Replaces the previous "Pause at 5 bounces" phrasing which was confusing for high-volume senders.

Cleaned up 9 stale references that implied Reply.io was a connected protection platform. Shipped Protection-mode platforms today: Smartlead, Instantly, EmailBison. Reply.io is on the roadmap (target Q2 2026).

Google Postmaster Tools OAuth + reputation read API. Feature-flagged on Growth/Scale tiers — domain reputation pulled directly from Google's view, not just our own bounce-rate inference. Surfaces in the domain detail view at /dashboard/domains.

One-click imports for teams switching from Smartlead and Instantly. Pulls campaigns, sequences, leads, block list, and mailbox metadata. API keys auto-discard after 24h. See Migrate from Smartlead and Migrate from Instantly.

Initial Model Context Protocol server published as @superkabe/mcp-server on npm. 17 tools exposed over stdio for Claude Desktop, Claude Code, Cursor, and Continue. (Browser/OAuth flow shipped April 29 — see top of changelog.)