Release log
What changed in Cruxes
One entry per release, in plain words. Nothing is listed until it is live, and nothing that is still switched off.
Security updates to the web app's framework and its outbound connections
The web app moved to a patched release of its framework and stopped accepting certificates from one certificate authority on the connections it makes, and the Cruxes card in Claude now says when a question was already set aside instead of showing a save error.
- Security and privacyThe web app now runs Next.js 16.4.1, which fixes two critical and one high-severity security issue in the framework.
- Security and privacyWhen the web app connects out to another service, it no longer accepts certificates issued by eMudhra's emSign certificate authorities.
- API and MCPIf you answer a Cruxes card in Claude for a question that was already set aside elsewhere, the card now says so instead of showing a save error; for one already decided, it now selects the option that was recorded.
Sign-up is open, and developers have a page of their own
Anyone can now sign in and start using Cruxes with a personal or work address, and the site links to a developer page you can read before signing in.
- Web appSign-up is open: anyone can sign in and start using Cruxes, with a personal address such as Gmail, iCloud or Outlook as well as a work address, and there is no request-access list any more.
- Security and privacyTo stop mass sign-ups, one network can create only a few new accounts a day and sign-in attempts from one network are rate limited; the new-account limit never applies to an account that already exists.
- Web appA Developers link in the home page's header and footer leads to a page you can read before signing in, with what Cruxes exposes and three steps to an API key.
Cruxes was closed for about seven hours
From 18:14 UTC on 23 October to 00:58 UTC on 24 October, Cruxes was closed behind a Coming soon notice while we finished launch security work, and nothing anyone had saved was lost.
- Web appWhile it was closed, anyone signed in outside the Cruxes team saw a Coming soon page instead of the app, the home page carried a Coming soon notice, and the waitlist form and unsubscribe links kept working.
- API and MCPWhile it was closed, the API, the MCP server and connector sign-in answered with a plain closed-for-maintenance message instead of working.
Extension uploads and Slack conversations stay out of web search
Files you upload through the extension, Google documents you open with it, and conversations from Slack or the Google Workspace add-on never go to web search, and the web app says why a search was skipped.
- Security and privacyA file you upload through the extension or attach in a chat, or a Google Doc or Drive file you open with the extension, is never sent to web search or another service the privacy page marks optional; files uploaded through the extension are still indexed with Google's embedding model, so a later confidential conversation can draw on them.
- Security and privacyA conversation or email that comes from Slack or the Google Workspace add-on never reaches web search, and the web app says why a search was skipped.
- Security and privacyA sign-in account is joined to an existing user only through that user's own verified email address.
- Web appIf a decision was already made somewhere else, the margin shows that decision instead of an error.
- API and MCPdetect_cruxes, gate_cruxes and requirements say which detector ran and, when they fell back to a simpler one, why.
The Gmail inbox scan is switched off
Cruxes no longer scans a connected Gmail inbox for decisions.
- IntegrationsCruxes no longer scans a connected Gmail inbox for emails that need a decision.
Safer recommendations, decision charts for agents, and fewer repeats
In gate_cruxes, cruxes Cruxes marks as sensitive no longer carry the detector's own recommendation, agents can draw a decision chart for a crux with two or more options, and most repeated cruxes in one run are neither shown nor billed.
- API and MCPIn gate_cruxes, a crux that Cruxes marks as touching security, privacy, legal matters, payments, production systems or something irreversible no longer carries the detector's own recommendation: it shows Jev's pick if Jev made one, and otherwise none, and you always decide.
- API and MCPA new get_artifact call draws a decision matrix, a consequence table or a chart of each option's estimated cost for one crux from its own fields, with no model call, and Cruxes cards in agents that show them include it.
- API and MCPdetect_cruxes, gate_cruxes and requirements drop near-duplicate cruxes from one run before anything is counted, so a repeat is neither shown nor billed, except a crux on a sensitive matter, which is always kept.
- API and MCPrank_decision has hourly and daily limits, and the Jev probabilities it returns are rounded to the nearest 5 points.
- API and MCPResults ask your agent to use its own way of asking you a question, and an unlimited account's billing line says nothing was counted.
- API and MCPA shortened crux id works for reading and is refused for writing, and pressing Confirm on a Cruxes card inside an agent is recorded as the agent acting for you.
- API and MCPResolving a crux that was never saved returns a clear error instead of failing.
- IntegrationsA reply in Gmail never changes a crux you have already decided.
- Security and privacyJev is not asked about sessions marked confidential.
- BillingWhen the free limit refuses a turn, it does so before the trial is charged.
- Web appThe crux panel follows your reduced-motion setting.
- Web appA public support page and a guide to connecting your agent are now online.
Google sign-in needs a verified email
Signing in with Google is refused when Google has not verified the email address.
- Security and privacyGoogle sign-in refuses an email address Google has not verified.
Enter answers a card, and sessions keep their own goal
Enter sends a typed answer, leaving a session mid-answer keeps your draft, and the Terms and Privacy pages take their retention periods and subprocessor list from the code.
- Web appOn a card in the app, the Analyzer panel and agent cards, Enter sends a typed answer and Shift+Enter starts a new line.
- Web appLeaving a session while an answer is being written stops the answer and keeps your draft.
- Web appA session's goal stays with that session, and signing out clears the last person's data from the browser.
- Web appIn the Analyzer panel and on agent cards, confirming a choice that was already made says so instead of showing a save error.
- Web appThe home page no longer lists connectors that are only planned.
- BillingThe pricing page says once what a Crux is and what it costs.
- API and MCPA crux can only be answered while it is open.
- Security and privacyThe Terms and Privacy pages now take their retention periods and subprocessor list from the code.
- Security and privacyWhen Cruxes hands a plan to a coding agent, the plan and the decisions in it are marked as quoted material, and the agent is told not to follow instructions inside it.
Slack cards match the app, and sessions are better protected
Cards in Slack follow the same layout as the web app, and one person can no longer write into another person's sessions.
- IntegrationsCards in Slack follow the same order as the web app and show Jev's pick beside the detector's recommendation.
- IntegrationsA Slack card says "time not recorded" when the time of the quoted message is not known, and Open in Cruxes opens the conversation itself.
- Web appThe free trial now has a shared daily limit of 6,000 turns, with 25 per person.
- API and MCPlist_cruxes returns at most 50 cruxes a page, and gate_cruxes lists its rankings in rank order.
- API and MCPdetect_cruxes, gate_cruxes and requirements accept an optional cap on how many cruxes to return; it can only lower what you are billed.
- API and MCPThe introduction every agent reads when it connects is rewritten to say what Cruxes is for and which calls are billed.
- Security and privacyNobody can create or write into another person's standing sessions or the reserved session names, crash reports no longer share one bucket, and video events follow session ownership.
- Security and privacyThe privacy page now says that quoted sentences are sent to the ranking service.
Cards name their source, and Cursor can connect
A card says which words it came from and when they were written, and Cursor's web agents can sign in.
- Web appA card opened from a reader page names the text it came from and when that text was written.
- Web appRank counts are more accurate: a recorded ranking no longer takes a place in the order.
- API and MCPCursor's web agents can connect to Cruxes and sign in.
- API and MCPTool descriptions and error messages now say what to do next, and a card shows "Cruxiness not scored" beside Jev's pick when it has no score.
- Security and privacyOur usage statistics keep the campaign tags on a link and receive only the page path of where you came from.
Analytics no longer receives page addresses with secrets
Usage statistics see only the page path, never the part of an address after the question mark.
- Security and privacyOur usage statistics receive only the page path, never the part of an address after the question mark, so private links and sign-in codes are no longer sent.
- BillingThe billing page no longer shows research credits.
- Web app"Rank N of M" counts only your own questions, and the side panel and phone menu have a new look.
- API and MCPDevin can register Cruxes as a connector and sign you in.
Sharper clips and a readable feed
The landing page clips are sharper, and the Cruxes feed reads clearly in either colour scheme.
- Web appThe product clips on the landing page are sharper, with a smaller version for phones.
- Web appThe Cruxes feed is readable in either colour scheme your device uses, and the History filters no longer leave you at a dead end.
- API and MCPCards for decisions that were gated no longer show "Jev: unavailable" beside "Decided by Jev".
Perplexity and Google Workspace
Connect Cruxes from Perplexity, and use it inside Docs, Sheets and Slides.
- IntegrationsPerplexity can register Cruxes as a connector and sign you in, including when it sends more callback addresses than we accept at once.
- IntegrationsA Cruxes card view for Google Docs, Sheets and Slides, with sign-in through Google.
- Web appThe Play control on the landing page demos no longer shows twice when the browser refuses autoplay.
- API and MCPOn the Cruxes card in Claude, Done stays hidden after a typed answer, because the crux is still open.
Close a card when you are done with it
Answered cards now have a clear way out, and the landing demos open on the card.
- Web appAn answered Crux card shows Done, a labelled Close button, and on a phone you can swipe it down.
- Web appThe demo clips on the landing page open on the card, load ahead of the tap, and are cached for an hour.
- Web appGoal and preferences groups the controls for agents and for this chat under two headings.
Launch-week fixes
A signed-in home, a quieter extension, and four corrections to the API and the privacy page.
- Web appThe signed-in home has an account button and a list of your sessions.
- ExtensionVersion 0.9.2 asks for site access once, instead of on every new site.
- API and MCPresolve_crux no longer records the first option when no choice was sent.
- API and MCPThe Claude Code command from Share and export replaces an earlier cruxes registration instead of failing on it.
- BillingCheckout needs a signed-in account.
- Security and privacyThe privacy page names the model hosts we use and says which of them reach Claude.
- Security and privacyThe web framework moved to its latest patch release.
Connect the Chrome extension from your account
The extension gets its own sign-in token in one click, and mobile sign-in follows the invite list.
- ExtensionConnect the Cruxes extension to your account from a page in the web app. It receives its own sign-in token, separate from your browser session.
- ExtensionVersion 0.9.1 ships the features the Cruxes card in Claude does not support yet, switched off by default.
- Security and privacySigning in with Google or Apple in the mobile app follows the same invite list as the web.