>Changelog/September 2026

What's New: MCP That Can Write, a Fuller Public API, and Connected Apps

A big update for everyone who talks to their library from an AI assistant or a script.

The MCP server can read, save, and tidy

Until now your assistant could search highlights and browse articles. Today it can do most of what you do in the app:

  • Read a saved article in full, with your highlights and notes on it, and answer questions about it.
  • Save a link to your inbox with tags. The page is fetched in the background.
  • Capture a highlight with a note and tags, and edit the note or favorite on an existing one.
  • Add, remove, and rename tags on highlights and articles.
  • Filter articles by save date, so "move everything from the last three days to Later" is one call.
  • Random highlights for a daily review from a chat.

Read access still works with every connection. Saving, tagging, and organizing is a separate permission you approve on the consent screen, and nothing on the MCP server deletes data. See the MCP page for every supported client, or the docs for the full tool list.

Connected AI apps, and no more weekly logins

Settings > API now lists every AI client connected through MCP, with when it connected and when it last called. Disconnecting there revokes the token on the server side, so access ends immediately even if the client still holds it.

Connections also refresh themselves in the background. Once you log in, a connection you use at all stays signed in; it only lapses after 90 days without use or when you disconnect it.

Public API: articles, tags, and clearer errors

The REST API caught up with the MCP server:

  • /articles to list, read the full text of, save, and triage articles between inbox, Later, and archive.
  • Tag management: create, rename, recolor, and delete tags, and attach or detach them on highlights and articles.
  • Search filters for tag, source type, and favorites.
  • Every error now carries a stable code, and bad query values return a 400 with the offending field instead of a server error.

The API docs and the agent skill file are updated.

Under the hood

MCP access tokens are now distinct from app sessions and can be revoked individually. The OAuth discovery metadata advertises write scope consistently, so clients that never asked for write access before will offer it on their next connection.