Changelog

Hundreds of MCP connectors join the catalog

New

Wiring up a new tool for your agents used to mean standing up a separate MCP server or building an integration from scratch, even for connectors Merge hadn't built itself. Hundreds of generic MCP connectors are now browsable and enabled directly in the Agent Handler catalog, running on the same authentication, access control, and governance infrastructure as every Merge-built connector. There's no server to host and no integration to write: enable one from the catalog and it inherits the same guardrails as the rest of your stack. See the docs.

Seven new connectors, plus webhooks for Teams and Zoom

New

Seven new connectors landed in the catalog this week: Okta, Brex, Microsoft Excel, Metabase, Sigma Computing, Statsig, and Granola. Microsoft Teams and Zoom also gained webhook support, so agents can react to activity in a channel or meeting as it happens instead of polling for it. Between the new connectors and the webhook support, agents now cover identity, spend, spreadsheets, BI, feature flags, and meeting notes without a custom build for any of them. See the docs.

FactSet connector retired

Deprecated

The FactSet connector is retired and no longer available in the Agent Handler catalog. If your agents relied on it, check the connector catalog for an alternative.

AI Guardrails

Security

Running agents against real customer data meant either trusting the model not to leak anything sensitive or building a scanning layer in front of every tool call yourself. The new AI Guardrails experience adds PII detection, a guardrail rule table for configuring what gets allowed, redacted, or blocked, and a live tester that shows each check running in real time. You can see exactly which rule fired on a given call instead of finding out after the fact. See the docs.

Gmail and Google Drive hardened

Security

Gmail drafts could previously lose data or send twice when a request was retried, and the connector's OAuth scope was broader than what it actually used. Both are fixed: drafts save reliably, retries no longer duplicate a send, and the OAuth scope is narrowed to only what the connector needs. Google Drive got the same treatment: shared-drive writes are dependable, export errors are clearer, file reads return plain text, and PII no longer ends up in logs. See the docs.