Local Command Sandbox, Start Saved Workflows from Chat, and Live Tab Status

This release lets you limit what agent-run shell commands can reach and start saved Workflows from chat. It also shows live session status on editor tabs, explains model fallbacks, loads MCP tools on demand, and fixes Workflow, chat, and account issues.

Turn on the local command sandbox to limit what agent-run shell commands and their child processes can access. Choose whether outbound network access is blocked, limited to common development hosts, or open. You can also run local stdio MCP servers inside the same sandbox.

The agent, built-in file tools, and remote MCP servers stay outside the sandbox. Permission rules still govern agent actions. The sandbox reduces risk but cannot guarantee complete isolation, so keep reviewing proposed commands. Select Command sandbox in the status bar to open the settings and confirm the sandbox is active. Learn more ->

Type /workflow-run, choose a recipe, complete its inputs, and start the run. Kiro opens Workflows on the new run. Learn more ->