🚀 arnold™ 1.3.1
- NA Release Date: 2026-10-12
- EU Release Date: 2026-10-15
arnold™ 1.3.1 expands connection and custom tool capabilities, introduces richer MCP UI experiences, and strengthens security, reliability, and platform administration.
🔗 Expanded Connection Management
What it is
arnold now supports Generic REST API connections, allowing custom tools to connect to HTTP endpoints beyond standard SAP connection scenarios with configurable authentication.
Connection handling has also been standardized across API Key, Basic Auth, and OAuth, with timeout protection added to prevent requests from hanging indefinitely.
Why it matters
- Connect custom tools to a broader range of APIs and services
- Use flexible authentication options
- More consistent connection behavior
- Improved protection from unresponsive endpoints

🖥️ Richer MCP UI Experiences
What it is
Custom tools can now use MCP UI Resource Templates to return interactive HTML experiences in supported AI clients. Templates use Liquid-based configuration and run with restricted functionality for safer rendering. Cloud UI resources are also now proxied through arnold for more centralized management and security.
Why it matters
- Go beyond text-only MCP responses
- Build richer, interactive experiences for AI users
- Centrally manage UI resources through arnold
- Maintain security controls around rendered content

🛠️ More Powerful Custom Tools
What it is
Custom tools now support output schemas, allowing admins to define the expected JSON structure returned by a tool. Input schemas can also define enum values to restrict fields to approved options. Tool execution handling has also been improved with better response validation and clearer errors.
Why it matters
- More predictable structured responses
- Better control over allowed tool inputs
- Easier integration with AI clients
- Faster troubleshooting when tool execution fails
🔐 Security & Tenant Protection
What it is
This release includes a critical security vulnerability patch and strengthens tenant handling during Salesforce Agentforce OAuth authentication. Tenant context is now preserved during OAuth client selection to prevent cross-tenant authentication issues. Webhook retry handling has also been corrected to prevent duplicate headers during repeated requests.
Why it matters
- Stronger platform security
- Improved tenant isolation
- More reliable Agentforce authentication
- Safer webhook processing
🔍 Improved Logging & Reliability
What it is
Logging and retrieval have been enhanced for better troubleshooting and audit visibility. Web job log cleanup has also been corrected to properly remove accumulated logs.
Why it matters
- Better troubleshooting
- Cleaner operational logs
- Improved audit visibility
- More reliable background processing