Changelog
Changes to VAIF Studio that affect how you build, newest first. A change marked Breaking needs a change in code that worked before. For the SDKs, each SDK page shows the current version and whether it can be installed.
10/22/2026: Write-only secrets, alert rules by plan, and production writes from the CLI and MCP
Secret values can be replaced but never read back. The number of alert rules per project follows your plan, and the CLI and the MCP server need an explicit flag before they write a production secret.
- Breaking: The routes that returned a secret value are removed:
GET /functions/secrets/{secretId}/valueandGET /projects/{projectId}/env-vars/{envVarId}/value.vaif secrets getnow explains that values are write-only and exits with status 1. Replace a value withvaif secrets set. vaif secrets setandvaif secrets deletetake--allow-production, and the MCP toolsset_secretanddelete_secrettakeallow_production. Both are off by default. A production secret write needs the flag and an owner or admin.- A variable or function secret created with
envId: nullapplies to every environment, production included, so creating one is always a production write. - Alert rules per project follow your plan; see Plans. Creating one past the limit answers
403with the codeALERT_RULE_LIMIT.