Evidence record / openhands
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the signals and issues that cite it, below.
2026-09-21-openhands-profiles-become-enforceable-scopes-mcp-servers-v1-19-0-and-secrets-v1-20-0-with-a-skill
Profiles become enforceable scopes: MCP servers (v1.19.0) and secrets (v1.20.0), with a skill allow-list since v1.16.0. Before v1.19.0, every profile could reach every configured MCP server, including ones that make changes. The PR says the editor never wrote mcp_server_refs. Now a profile can list the MCP servers it may use. On v1.20.0, a profile can also be limited to all, none, or chosen saved secrets. The agent server enforces this; Canvas does no client-side filtering. Deleted references are kept, so an unrelated edit cannot silently widen or narrow access. Separately, v1.16.0 turned the built-in skill catalog from all-on with a deny list into an allow-list. Per the PR, 11 of 59 skills are on by default.
Channel: tagged-release. Half: capability. Date: 2026-08-27 (skills), 2026-09-16 (MCP), 2026-09-17 (secrets).
Operator consequence: On v1.20.0 you can build a read-only exploration profile with no write-capable MCP servers and no deploy secrets. Before 2026-09-16 that was not possible. Test it by launching the profile and checking which MCP tools and secrets the running agent actually has. The item 1 override still applies. After upgrading to v1.16.0, re-check your skill set; skills you relied on may be off now.
Receipt
Finding metadata
Run: 2026-09-21-weekly-digest-2026-08-20_2026-09-21-frontier-v0
Finding ID: 2026-09-21-openhands-profiles-become-enforceable-scopes-mcp-servers-v1-19-0-and-secrets-v1-20-0-with-a-skill
Accepted signals
- Asking for Docker got you the host until v1.20.0 / 2026-09-21
Profile citations
- OpenHands / claim / profiles-scopes
Source links
Primary links, including exact changelog lines when available.
- merged pr2026-09-21-openhands-profiles-become-enforceable-scopes-mcp-servers-v1-19-0-and-secrets-v1-20-0-with-a-skillgithub.com/OpenHands/OpenHands/pull/17289merged pr2026-09-21-openhands-profiles-become-enforceable-scopes-mcp-servers-v1-19-0-and-secrets-v1-20-0-with-a-skillgithub.com/OpenHands/OpenHands/pull/17237tagged commit file2026-09-21-openhands-profiles-become-enforceable-scopes-mcp-servers-v1-19-0-and-secrets-v1-20-0-with-a-skillOpenHands/software-agent-sdk / openhands-agent-server/openhands/agent_server/server_details_router.py
Versioned source: run artifact