Changelog

Claude Fable 5 is now available through Anthropic. It can be used with AI resource queries when you connect Anthropic with your own API key.

The following patches are now available on the Stable release channel:

• Retool 4.0.4
• Retool 3.334.21

Update your Retool instance to apply the latest bug fixes and security patches.

Retool 4.16 is now available on the Edge release channel for self-hosted organizations.

Classic apps that include custom components and organization-level themes can now be converted to the new app building experience.

To support custom components, the agent investigates the custom component and recreates it in the converted app with as few changes as possible.

To support classic organization-level themes, the agent applies the same style, color, and typography to the app as were represented in the organization-level theme. The agent does not create a new organization-level theme that applies to apps created with the new app builder.

Retool now provides a native integration for Microsoft Graph, the unified API for Microsoft 365 services. You can create a Microsoft Graph resource with OAuth 2.0 or Microsoft Azure Identity authentication to read and manage Entra ID users, mail, calendars, OneDrive and SharePoint files, and Teams messages—all from Retool apps and automations.

Presto resources are now supported by Retool Agents. You can @ tag a Presto resource when building a custom tool to give an agent typed, structured access to your Presto queries alongside your other SQL resources.

Retool now provides a native integration for Snowflake Postgres, Snowflake's PostgreSQL-compatible interface for querying your Snowflake data. You can create a Snowflake Postgres resource to connect over SSL with a CA certificate and run SQL queries to create, read, update, and delete data—all from Retool apps and automations.

Retool now supports publishing apps on custom domains. If you self-host Retool (which inherently uses a custom domain) or use a custom domain on a cloud instance, your apps are published to the domain you define in the following format: https://example.retool.com/rr/app/<appName>.

If your organization uses custom domains, previously-published apps should be republished in order to serve them from the appropriate domain.

Apps published on custom domains are subject to an additional set of limitations that are applied because Retool runs your app inside a sandboxed iframe with allow-same-origin disabled.

The following patches are now available on the Stable release channel:

• Retool 4.0.3
• Retool 3.334.20

Update your Retool instance to apply the latest bug fixes and security patches.

Admins can now customize the Content Security Policy (CSP) that Retool enforces on apps. Retool applies a strict default policy that restricts which origins an app can load scripts, fonts, images, and other resources from. You can now extend that policy org-wide to allow the additional origins your apps need, or tighten the defaults further.

For example, if custom JavaScript in an app loads a charting library from a CDN such as https://cdn.example.com, the default script-src 'self' policy blocks the script and the app fails to render it. You can now add that origin to script-src so the app can load it without loosening the policy for any other resource.

Configure rules in Settings > App security > Content Security Policy. Changes apply to every app in your organization and are recorded in your audit logs.

For more information, refer to Customize the Content Security Policy for apps.