What shipped, and when.

Customer billing and personal areas

A billing service for the business you run on Synapse, not for your Synapse subscription. One multi-company service: your customers sign in at id.catalation.com in a branded identity realm that belongs to your company alone, use a personal area at my.catalation.com/{slug} for contracts, invoices and balance, and your founders administer it at billing.catalation.com.

• NewWeb services → Customer billing in the cabinet: enable or disable per company, status, admin and portal links with copy buttons.
• NewConnect billing to my website hands the web team a task to add Sign in and Create account links to your site.
• Scopev1 is invoice- and balance-based; no card payment inside the portal yet. Admin roles are owner and chairman; co-founders now join only by invitation.
• SecurityRealm per company on a separate identity server; reserved slugs; the API listens on loopback only; per-IP rate limits on sign-in and sign-up; a signed, digest-checked host installer. Reviewed by Security before release.

How customer billing works →

Platform security refresh

• SecurityCabinet upgraded to Next.js 15.5.28 for a critical image-optimisation advisory; the API's dependency advisories (proxy-addr, body-parser, zod) resolved; production database images refreshed.
• SecurityCap-table ownership tightened: every company is bound to its organisation; direct founder-add retired in favour of invitations.
• MCP UniverseOnly a catalogue publisher can promote a connector; a kill switch quarantines a bad catalogue version while installations already using it keep working.

Integrations: MCP Universe reaches production

The connector layer under Synapse went live at mcp.catalation.com. A system you already run becomes a governed MCP surface: operations classified by risk, calls authorised and recorded, credentials injected at the edge so no model sees them.

• NewPer-company MCP endpoints, a control plane, and a shared catalogue with Pipedrive and Jira Data Center connectors.
• NewConsole in the cabinet style: credentials, AI engines, installations and the audit log managed from the web. Request a connector by uploading an OpenAPI spec; a local or BYO-key AI engine builds it.
• NewCabinet Settings → Connectors and an approval card in CEO chat; the CEO gains seven mcpu__* meta-tools as a second tool source. Beta — merged, not yet verified with a customer company.
• AlsoFederate an existing MCP server (Tier 0), elicitation and resources, sessions, approval expiry by a worker role.

Integrations →

Lead capture on your website, one checkbox

Tick Use on my website on a CRM capture key: the key is placed in the site's build settings and the web team receives a task to add the enquiry form. The CRM itself — contacts, leads, deals, tasks, notes — is confirmed in production.

Company email

Mailboxes per plan tier, provisioned on a managed mail provider; an inbox in the cabinet with threaded conversations; HTML rendered in a sandbox with remote images blocked by default; compose and reply with a daily quota shown in the UI.

• StatusFirst provisioning ran for our own company on 30 September. Inbound sync stays off for everyone else until the quarantine hardening clears Security review. Marked pilot on purpose.
• LegalThe mail and DNS providers were added to the DPA sub-processor list and the privacy policy.

Custom domains for company websites

A Custom domain card under Web services: add the domain, set the A and TXT records shown, press Check connection. Ownership is verified, a Let's Encrypt certificate issued and renewed automatically, and your site answers on your own name. Growth tier and up. The first customer domain was connected the same day.

Agent workers: enrol a machine with one line

Run agents on compute you own. A served installer and a single-use enrolment code register a worker; the platform leases issues to it by capability and reports its health in the cabinet.

• NewWorker kinds for Claude and for a local open-weight executor are live. Codex and Gemini kinds are built, pending Security review and a release decision.
• SecuritySingle-use codes, a shared read-only token for workers, executor health checks.

The cabinet, redesigned

A new design system with light, dark and system themes; one application shell for the cabinet and admin with a redesigned sidebar, a ⌘K command palette and breadcrumbs; a dashboard that works as a command centre, with status badges that mean the same thing everywhere.

• ImprovedSplit-layout sign-in and sign-up, email-only.
• ImprovedAgent logs, approvals and tasks reachable from the dashboard without leaving it.

Model router tells the truth

Availability pills now say why a model can't answer — Needs an API key, Not supported yet, Provider failing, Cost cap reached — instead of silently falling through.

• NewOrdered CEO model chain with failover; each reply reports served_by. Backend half merging.
• ImprovedCEO card shows platform provenance for the CEO's model.

New CEO chat

Rebuilt on a streaming chat engine. Many conversations per company, replies streamed over SSE, a Stop that actually cancels, and turns that keep running when you close the tab — come back and rejoin.

• NewFork and rename conversations; attach images.
• NewTool calls render live, so you watch the agent work instead of a spinner.

Native CRM and website lead capture

A per-company CRM in the platform database: contacts, companies, leads with idempotent conversion, deals by stage with column totals and a required lost reason, tasks, notes, activities. An audit row on every write.

• New/crm, /crm/leads, /crm/deals in the cabinet. Starter plan and above.
• NewPublic lead-capture endpoint with mintable, rotatable keys and spam signals that flag rather than reject.
• NewLead retention and personal-data scrubbing.
• SecurityFounder task text is fenced before it is written to GitLab.

Agent logs in the cabinet

Read what your agent team is doing from the Agent team page, without SSH or a terminal.

The CEO runs its own tool loop — and shows its diffs

A dedicated CEO orchestration engine now drives chat. The CEO uses the same tool surface as external assistants to create tasks, edit the wiki and manage the org chart. Held changes render as a unified diff with Apply / Discard.

• NewOrg chart at /company/structure — pan, zoom, CEO at the root, one column per department.
• NewYour company setup is committed as wizard.md into your docs repo (redacted) so every agent knows the company.
• RulesNever overwrite founder content without a diff; never delete without confirmation; never work around a queued proposal; unclassified tools count as writes.

Connect Claude: the MCP control plane

Synapse became an MCP server. Claude Desktop, claude.ai, Claude Code and the Anthropic MCP connector can run your company over OAuth 2.1 — 33 tools across company, tasks, knowledge, team, memory and CEO governance. The server holds no credential and can propose but never approve.

• NewConnect an AI assistant page at /settings/assistants.
• NewThe CEO agent gains the same tool surface.
• SecurityAccess tokens are bound to the API they were issued for.

Tasks use your repo's real labels

Label pickers read from the repository instead of a fixed list. The cabinet reports repos missing from older workspaces and repairs them on demand.

Agent teams reach production

Put a Claude agent team on your own issue board, in a per-company container, authorised with your own Claude subscription through a paste-a-code relay. The platform never holds your Claude credential.

• NewReview agent merge requests in the cabinet: diffs, pipeline status, conflict warnings, Merge / Deny, sensitive-change acknowledgement, stale-view refusal.
• NewThe paused agent loop resumes automatically after your decision.

Agent team page

/agent-team: deploy a team, connect Claude, and a notification bell and banner for anything waiting on you.

A website for every company, and a writable task tracker

• NewEvery company gets a public site at {slug}.catalation.app, live from creation, published on every push to its new web-site repo.
• NewCreate, edit, assign to roles and close tasks from the cabinet; milestones; a grouped sidebar.
• ImprovedCEO chat grounded in your company document, replies in markdown.

Knowledge becomes a git-backed wiki; VC audit verified in production

• New/knowledge edits your company's docs repo directly. Folders: create, rename, move — one atomic commit that rewrites links.
• NewCompany audits run in the background, are saved in history and download as PDF.
• SecurityPer-company row-level isolation enforced in production; the API refuses to boot without it. Secrets vault live; founder AI keys stored through the broker.

Enterprise groundwork and the marketplace

• NewMarketplace listings and browse. Business transfer built and held behind a flag pending a third-party PII security pass.
• NewOn-prem Mode 1 bundle: Docker image, install and upgrade runbooks, air-gap log check, generated Keycloak realm.
• NewCompliance-check framework (GDPR, PCI DSS v4.0, HIPAA, SOC 2 technical controls), B2B CEO protocol, enterprise admin console at /enterprise.
• PlatformMoved to Node 24 LTS.

Cabinet pages for operating the company; Product Factory; billing

• NewCEO chat, Teams & Roles, Knowledge + memory, BYO AI keys and the Model router UIs.
• NewBilling at /billing with Stripe-hosted checkout; Stripe Connect payouts to your own account.
• NewProduct Factory Mode 1 pipeline (template → build → founder approval gate) — mock slice; live hosting deferred.
• NewCap table and multi-founder settings; Modes 2 and 3 build pipelines (unverified in production).
• LegalDraft Terms, AUP, DPA and Privacy Policy v0.1, pending counsel.

A private GitLab workspace per company

• NewAutomatic provisioning of frontend, backend, database, mobile, docs and infra repos with labels, milestones and base files. Task tracker read view.
• NewVC Audit section with the dual-AI PDF report.
• NewFour reference templates; template package format ratified.

Synapse goes live

The founder cabinet at console.catalation.com: sign up, log in, Google sign-in via Keycloak. The 8-step Company Setup Wizard with autosave, inline CEO hints, a completeness score and a launch gate. Finalising creates the company and hands the CEO its brief.

• NewCEO agent API with bounded authority and the diagnostic-not-strategist rule; hybrid teams; MemPalace memory; model router; BYO keys via secrets broker.
• SecurityServer-side login flow; access tokens never in URLs.