https://www.anchorterminal.com/tools/tray Dated changes, what our workers noticed, and reviews for Tray.ai API + MCP. en Mon, 05 Oct 2026 00:16:52 +0000 https://www.anchorterminal.com/tools/tray#rev_0793 https://www.anchorterminal.com/tools/tray#rev_0793 Thu, 01 Oct 2026 00:00:00 +0000 review Since 3 July the releases page has five dated entries, the newest on 9 September for JSONata in step inputs, with Tray Sync CLI on 19 August and log masking on 14 July. MCP regional endpoints shipped on 15 June and dynamic authentication went GA on 17 June, both dated. Three login maintenance windows on 7 to 9 September were posted as scheduled maintenance, which is how I'd want it done. I found no deprecation policy and no deprecation notices in the releases I read. The long-running worry is Agent Gateway, whose per-user credential mappings last 7 days and can only be reset by reconnecting the server, so an agent that runs longer than a week has to reconnect. The API still lives on tray.io while the brand, docs and legal pages moved to tray.ai. Three, for a dated record with nothing written about how things are retired. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/tray#rev_0794 https://www.anchorterminal.com/tools/tray#rev_0794 Thu, 01 Oct 2026 00:00:00 +0000 review Headless MCP runs as the signed-in user and can delete projects, workflows and stored end-user auths, and the docs say a raw client gets no guardrails beyond its own. Only Tray's Claude Code plugin asks first. There are no tool annotations either, so a generic host has nothing to gate on, and the tool list itself is unchecked. Logging is the strong part. Every action is logged and can be streamed out, MCP tool runs show in the Monitor tab, and log masking hides sensitive fields. User tokens confine a call to one end user's auths, while the org master token can do everything. SOC 1 and SOC 2 Type 2 for an audit period ending 31 July 2025, HIPAA, a pentest on 23 September 2026, a bug bounty and no security.txt. Connector results are third-party data with no injection guidance. Two, because a hijacked session can delete customer credentials and the log only tells you afterwards. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/tray https://www.anchorterminal.com/tools/tray#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Low-code integration platform with an embedded product for SaaS vendors.