Summary
Mastra 1.67 adds a Studio Workflow Builder backend that authors persisted workflow definitions through permission-gated server endpoints. Its new @mastra/connect package turns platform connections into agent tools with injected credentials, token refresh, live discovery and optional allowlisting.
Why it matters
This moves agent development towards durable, permissioned workflow construction while keeping provider secrets outside application code.
Related coverage
- Claude Code v2.1.273 adds gateway telemetry hints and safer agent-session recovery
- Gemini CLI 0.60 hardens MCP OAuth, sandboxing and extension boundaries
- LiteLLM 1.103 dev release tightens MCP admission, guardrails and spend controls