Releasesby GlyphActions - TypeScript Definitions in NPM
We are excited to announce that __Actions Types__ is now available at [__npmjs @auth0/actions__](https://www.npmjs.com/package/@auth0/actions "Actions NPM package"). This NPM library currently facilitates TypeScript definitions for Auth0 Actions.
Also shipped Nov 12, 2025Okta in November 2025 →
Workflows graduate to beta! Product data, meet automation
Workflows has moved to beta, allowing users to automate product-led actions like emails and Slack alerts based on live event data.
Use Deepgram's Managed Cartesia TTS Models
We're excited to announce an easier way to use Cartesia's Text-to-Speech models inside Deepgram's voice agent – Deepgram-managed Cartesia models . Similar to our managed LLM's , simply specify Cartesia as your model provider and the correct model name to get started instantly.
🤖 Claude Haiku 4.5 LLM Support
We've added support for Anthropic's new Claude Haiku model in our Voice Agent API! Implementation: Configure your chosen model in your Voice Agent settings: { "type": "Settings", "agent": { "think": { "provider": { "type": "anthropic", "model": "claude-haiku-4-5" } } } } For complete information about supported LLMs including Claude Haiku 4.5, visit our...
DuckDB 1.4.2 Bugfix Release
This is a bug fix release for various issues discovered after we released 1.4.1. PR #19716 addresses the issues raised in CVE-2025-64429 . Users of the DuckDB encryption feature are encouraged to update.
API Shield - New BOLA Vulnerability Detection for API Shield
Now, API Shield automatically searches for and highlights Broken Object Level Authorization (BOLA) attacks on managed API endpoints. API Shield will highlight both BOLA enumeration attacks and BOLA pollution attacks, telling you what was attacked, by who, and for how long.
Digital Experience Monitoring - DEX Logpush jobs
Digital Experience Monitoring (DEX) provides visibility into WARP device metrics, connectivity, and network performance across your Cloudflare SASE deployment. We've released four new WARP and DEX device data sets that can be exported via Cloudflare Logpush .
More from Auth0Every Auth0 release →
New Dynamic Client Registration (DCR) Scope Added to Tenant ACL
Auth0 has added a __Dynamic Client Registration (DCR)__ scope to the __Tenant Access Control List (ACL)__. This enhancement allows administrators to control access to the /oidc/register endpoint based on a variety of network and client signals, helping prevent unauthorized or automated client creation. Configuration is available via the __Management API__.
New Management API endpoints to configure Bot Detection settings
Auth0 now provides Management API endpoints to manage Bot Detection configuration! __Key Capabilities:__ __Bot Detection Controls:__ Automate adjustments to the Bot Detection Level (low, medium, or high) and manage your trusted IP AllowList via API.
Exciting Enhancements Now Live in Multiple Custom Domains (MCD) Early Access
We are thrilled to announce a significant expansion of capabilities within the Multiple Custom Domains (MCD) Early Access program for Enterprise customers. This update delivers powerful branding and white-labeling capabilities with improved flexibility to scale your identity solution from a single Auth0 tenant.
Add Session Metadata to Auth0 Sessions
As part of Continuous Session Protection, you can now attach custom key–value data to a user’s session using Actions or the Auth0 Management API. This allows enterprise customers to persist contextual data (such as device name, organization ID, or custom flags) throughout the session lifecycle.
Security Center Threat Behavior Metrics Update
We’ve refined the logic behind how Security Center metrics are calculated to provide more accurate and actionable insights. Metrics now reflect IP activity using the following logic: When an IP address triggers more than 10 relevant events for a given metric within a single hour, it will now be counted toward that metric.
Auth for MCP: Now in Early Access
Auth0 is thrilled to announce that __Auth for MCP__ is officially in Early Access! This release extends the power of Auth0’s standards-based authorization platform to the Model Context Protocol (MCP), securing your MCP servers, MCP clients, AI agents and the APIs they interact with.
Auth0 for AI Agents is generally available
We are thrilled to announce a major milestone: the General Availability (GA) of **Auth0 for AI Agents!** [Auth0 for AI Agents](https://auth0.com/ai) is a suite of features to empower developers to build secure agentic applications and experiences.
Google Workspace Inbound User Directory Sync Beta
We’re excited to introduce Google Workspace User Directory Sync, now available as part of our Beta program. This feature allows organizations to automatically synchronize users from their Google Workspace directory into Auth0 - ensuring user data stays accurate and up to date without relying on login events.