RBAC is now available. Define roles, assign them to users, and grant per-engine access independently. Ownership transfer is supported, so the original creator is no longer a permanent dependency.

Also shipped

• Claude Desktop logs into your MCP server with a click. The server now speaks browser-redirect OAuth – the client opens a tab, you confirm in the dashboard, you're in. No more copy/pasting API keys into client configs.

• lockedKeys on the async API. Slugs, IDs, URL parameters, and any value that's structural metadata rather than translatable content stay verbatim across target locales and bypass the LLM entirely.

• Logs show the context that produced each translation. Open any request in the Log tab and you can see exactly which glossary terms, instructions, and brand-voice rules the engine retrieved – plus the glossary review reasoning.

• Cost-by-model breakdown. See how much you spent on each model, in tokens and in dollars.

Full changelog: lingo.dev/changelog