Blog
September 3, 2026
DreamFactory 7.7.0 is now the recommended stable release. It's a substantial one: AI agents become governed, human-owned API consumers; a new open-source API Builder lets you author custom REST endpoints without writing scripts; versioned Schema Contracts catch database drift before it reaches your consumers; and the platform baseline moves to Laravel 13.25 and PHP 8.3.
Put simply — AI can now do real work against your data under named ownership, scoped permissions, and a full audit trail, and the rest of the release makes your APIs faster to build and harder to break.
AI agents get a control plane
The most significant addition in 7.7.0 is the AI Agent Control Plane, which treats AI agents as first-class API consumers rather than shared credentials passed around a team.
Every agent is bonded to a human owner, scoped by an existing DreamFactory Role, and authenticates with a short-lived API key. When an agent needs access it doesn't already have, it files a request that an administrator approves in one click. Deactivate the agent — or the person who owns it — and its key stops working immediately.
The practical effect is that AI can do real work against your data under named ownership, scoped permissions, and a full audit trail. No service account with standing access to everything, no ambiguity about who authorized what. The Agent Control Plane is available in commercial builds.
API Builder: custom endpoints without scripts
API Builder is a code-free workspace for authoring custom REST endpoints on top of your existing services. Endpoints run deterministic execution plans with declarative transform steps, and they deploy as first-class services — inheriting your roles, keys, logging, and tracing, with OpenAPI documentation generated automatically.
If you've been maintaining server-side scripts to reshape a response or stitch two services together, this replaces that work with something reviewable and versionable. API Builder is open source and ships in every build.
Schema Contract Locking
Schema Contract Locking creates versioned, hashed, immutable schema snapshots for SQL services. A drift engine classifies every change against the locked contract as breaking, potentially breaking, additive, or cosmetic, and runtime enforcement keeps responses inside the contract even when the underlying database moves.
It's opt-in per service — default behavior for existing services is unchanged — and available in commercial builds.
See a video summary
Tracing, alerts, and a rebuilt admin experience
7.7.0 adds platform-wide request tracing. Every API request carries a trace id that joins AI usage, prompt logs, MCP audit rows, and the new agent activity ledger — so a single agent action can be followed across every hop it touched.
Alongside it:
A new Alerts package for real-time Slack and webhook notifications
A major admin UI overhaul, including a Cmd/Ctrl-K command palette
A rebuilt BigQuery connector with full write support
OIDC group-to-role mapping
Scheduler run-as
What to know before you upgrade
The platform baseline moves to Laravel 13.25 and PHP 8.3 minimum (tested on PHP 8.5). Upgrade PHP before moving to 7.7.0, then run database migrations.
Two cache changes are worth checking in advance:
The default cache store is now database when CACHE_STORE is unset.
Any custom config/cache.php must carry 'serializable_classes' => true.
Security fixes in DreamFactory are cumulative, so upgrade promptly if you expose the AI gateway, MCP bridge, OIDC SSO, or agent surfaces. Docker images are available on the usual registry, and managed deployments will be scheduled with your DreamFactory support contact.
See the full Upgrade Guide | Read the complete release notes
Get started with 7.7.0
Whether you're running DreamFactory today or evaluating it for the first time, 7.7.0 is the release to build on.
Book a walkthrough with our team
Need help with your upgrade? Reach out to dspsupport@dreamfactory.com.
