Backend

​

v1.6.0

​

SCIM Group Workspace Mapping

• Introduced flexible group-to-workspace mapping, allowing you to provision groups from your identity provider (Okta or Azure Entra) with any naming convention and map them to Portkey workspaces and roles directly from the Portkey Control Plane
• Documentation

​

Fixes and Improvements

• Fixed an issue where archived usage limit policies were not being skipped during processing
• Fixed non-streaming playground request errors caused by header conflicts
• Added support for aws_region parameter in Bedrock integration for serviceRole auth type.

​

v1.5.1

​

Improvements

• Added support to read logs based on the path format identifier released in Gateway v1.17.0
• Added backend dependencies for the new F5 Guardrails
• Fixed an issue where workspace-created integrations were not being cleaned up when a workspace was deleted

​

v1.5.0

​

Usage and Rate Limit Policy

• Introduced usage limits and rate limit policy APIs, which allow organizations to apply flexible budget and rate limit controls based on dynamic conditions (API keys, metadata, workspace, etc.).
• More details: Documentation and API Reference

​

DB Migrations

• Added new column in ClickHouse to store the log object path format identifier

​

v1.4.0

​

Security Patch

• Removed root user from container image (BREAKING CHANGE). The container image used by this chart no longer runs as root. The image now runs processes with a non-root UID and enforces a non-root container securityContext. Requires Helm repo upgrade (>app-1.4.0) to deploy the new image and chart settings.

​

Customizable Email Templates

• Added new environment variable to enable customization of branding elements (logo, company name, support email, docs URL) and template paths.

​

Deployment Configurations

• Added deployment management endpoints (create, list, get, update) to configure gateway deployments on the control plane

​

v1.3.3

​

Fixes and Improvements

• Added deduplication logic for default workspace guardrails to avoid duplicate guardrail slug entries
• Minor enhancements to return more details in the list traces API
• Updated JWT Guardrail schema to support new parameters added in the latest Gateway build
• Fixed edge cases where workspace slugs were not handled for integrations API
• Updated internal dependencies to patch security vulnerabilities

​

v1.3.2

​

Workspace Grouped Analytics API

• Introduced a new API that aggregates and returns analytics data grouped by workspace, with support for multi-dimensional grouping and cost-based filtering.

​

Multi-Organization SSO Support

• Added enhancements to allow users to authenticate via SSO across multiple organizations

​

Fixes and Improvements

• Added mcp.invoke permission for workspace API keys
• Fixed an issue where prompt version label mapping was not being cleaned up when a label was deleted
• Streamlined slug and name validations across providers and integrations APIs. Both slug and name can now have a maximum length of 255 characters
• Fixed edge cases where workspace slugs were not handled for integrations API

​

v1.3.1

​

Guardrails Schema Updates

• Updated schema to support the following two new guardrails:
  • Add Prefix: Add a configurable prefix to the user’s input before sending to the model
  • Allowed Request Types: Control which request types (endpoints) can be processed. Use either an allowlist or blocklist approach

​

v1.3.0

​

MCP Preview Release

• Added MCP management APIs and OAuth support

​

Organization and Workspace Security Settings

• Introduced Configs Security Settings to control configs view and edit access for member and manager roles
• Introduced workspace-level user API key limits to restrict the maximum number of user API keys per workspace
• Added user API key expiry settings with configurable default and maximum expiry durations

​

SCIM Enhancements

• Introduced a new setting (SCIM Provisioning for Organization Management) to allow organization user management only through SCIM while enabling workspace user management via Portkey

​

API Key Management API Enhancements

• Updated the list api-keys response to not return raw keys for other user API keys
• Fixed issues with pagination total count and made the logic more robust to handle created_at conflicts
• Enhanced the current_usage field in the usage_limits object to show fractions for more accurate tracking

​

Workspace Management API Enhancements

• Added workspace budget reset functionality with periodic reset options in the update workspaces API
• Added strict workspace name filter in the list workspaces API for improved search accuracy
• Fixed workspace API keys cache invalidation when budget exhausts
• Made workspace budgets periodic reset field nullable for flexibility

​

AWS Bedrock Enhancements

• Added AWS service authentication as a new auth type for Bedrock integrations

​

Fixes and Improvements

• Streamlined the Model Catalog APIs to accept slugs in URLs for all eligible endpoints
• Fixed pagination bug in the list users API (/admin/users)
• Made the inference component field optional for AWs Sagemaker Integrations
• Added a setting to disable the Getting Started page
• Improved error handling when a user is already part of an organisation during invite join attempts
• Added strict validations for rate_limits and usage_limits across api-keys, providers, integrations, and workspaces for data consistency
• Added JWT errors to audit logs for better security tracking
• Fixed integration global_workspace_access_settings rate limits to map correctly