September 11, 2026
More complete activity history
The account and per-project activity history got more events: file changes from the file manager (save, delete, move, upload), deploys, snapshot restores and domain changes.Each activity now shows who triggered it, with a dedicated filter to browse by origin.API keys with scopes and allowed IPs
Until now, an account had a single API key with full access. You can now create up to 10 keys, each with a name, a set of permissions (apps, databases, snapshots, account, workspaces, notifications — with “read only”, “read and write” and “full access” shortcuts) and, optionally, a list of allowed IPs (the check uses the real source IP, not a header the client sends itself). A key used only by a CI server, for example, can be restricted to creating deploys and see nothing beyond that — and locked to that server’s IP.A new key’s secret (vc_live_...) is shown only once, at creation or rotation; after that only
the start and end remain visible. Keys generated before this change keep working normally, with
full access.The legacy generation (the single “generate key” button) remains available for scripts and the
CLI.