Airogel CMS Docs

MCP: clients on the 2026-07-28 protocol (including Claude Code) received a 500 on every connect because the server tried to serve subscriptions/listen. The server now declines it and no longer advertises subscribe/listChanged capabilities.
A signed-in user with no account membership got a 500 on every page, including the one that creates an account. They are now sent to the create-account page.
Account deletion reported success but did nothing for accounts holding portal session logs, auth grants or benchmarks. It now completes, and purges attached files and storage objects with it.
Removing a blueprint from a collection now actually removes the blueprint and moves its entries' values safely; it refuses if entries in another collection still reference the blueprint.
The MCP tool list is derived from the tool files; a broken tool file now raises instead of advertising an empty server.

Constituents: at most one primary identifier per type (email, phone). Portal visitors who first signed in with Google or Apple are now greeted by their email address rather than the OAuth subject.
Constituent merges are one hop and terminal: merging into an already-merged record is refused, existing tombstones are redirected to the new target, and child records cannot be created on a merged constituent.
The admin's non-functional "OTP required for login" and OTP secret fields were removed; two-factor authentication was never active for platform users. (Constituent portal OTP codes are unrelated and unchanged.)
Model benchmarks: a judge that returns no usable score marks the run unscored instead of recording 1/10, and completeness/structure/design/navigation sub-scores are stored.
Admin (Avo): user edits, SiteGlobal detail pages, invitation links, audit and email-suppression pages, and the billing panels on accounts all work again.