The app builder now includes a debug console to help you inspect your app, surface issues, and resolve them with the agent. Open it from the status bar at the bottom of the app builder.

The console has three tabs:

• Errors: Function, build, and frontend errors. Hover a row to add its context to the chat or ask the agent to fix it, or click Fix all to resolve every error at once.
• Logs: Logs emitted by the app or the agent, including function, build, frontend, sandbox, agent, and git events.
• Timeline: A record of function runs with the elapsed time and the success of each, useful for diagnosing performance issues.

The agent has access to the same information available to builders in the debug console. This enables the agent to disagnose and address issues more quickly, and it can write more performant functions.

Enterprise organizations can use access policies to define which data each group of users can read or write on a resource. Retool enforces access policies on every query that runs against the resource. A policy can grant access to whole tables, specific columns, or specific rows.

For example, you can use an access policy to restrict an EMEA group's access on a table to only the customer rows for their own region. Retool applies that restriction to every query the group runs against the resource, so it holds regardless of which app, query, or agent the request comes from.

One policy covers queries from apps, the query library, raw SQL, and agents. Workflow queries against an enforced resource are blocked, so account for any workflows using the resource before you turn enforcement on. Retool supports access policies on PostgreSQL resources.

Access policies are enabled by default on cloud instances. On self-hosted instances, navigate to Settings > Beta and toggle on the feature flag for Enforce data security using access policies. To create a policy:

1. Open a PostgreSQL resource and select the Access Enforcement tab.
2. Turn on Data access enforcement.
3. Create a policy, choose the groups and environments it covers, and define its rules.
4. Activate the policy, then click Save changes.

Turning on data access enforcement closes the resource by default in every resource environment. Access policies apply only to the resource environments you select, so grant broad access first and narrow it once your policies are in place. Refer to Configure access policies for more details.

Access policies operate by granting access, not denying access. Refer to Access policies and Data access enforcement for more information.

You can now upload files to be used as assets in your app through the Chat tab in the app builder. Previously, uploaded files could only be used as context for the agent.

Common use cases for uploaded files as assets include:

• Embedding PDFs.
• Adding a company logo to the app header.
• Presenting images within the app.

You can now trigger workflows from functions in the new app builder. Converting classic apps that trigger workflows is now supported as a result.

To trigger a workflow from your app, open the Chat tab and prompt your agent with the workflow's name.

The triggered workflow is run on behalf of the app's authenticated user.

Retool now provides a native integration for Microsoft Graph, the unified API for Microsoft 365 services. You can create a Microsoft Graph resource with OAuth 2.0 or Microsoft Azure Identity authentication to read and manage Entra ID users, mail, calendars, OneDrive and SharePoint files, and Teams messages—all from Retool apps and automations.

Retool now provides a native integration for Snowflake Postgres, Snowflake's PostgreSQL-compatible interface for querying your Snowflake data. You can create a Snowflake Postgres resource to connect over SSL with a CA certificate and run SQL queries to create, read, update, and delete data—all from Retool apps and automations.

You can now use Retool's MCP server to import React apps directly from your agentic coding environment.

Open a React app, and ask Retool to import the app. Retool guides you through the process of selecting the appropriate resources, and sends you a link to the newly imported app in the app builder. From there, you can make tweaks to the generated app, and securely publish the app using the MCP server or from the app builder.

Retool's new app builder now supports importing React apps from external sources, such as Replit, Lovable, and Claude Code, for further refinement and development in Retool.

To import your React app in Retool, generate a .zip file of the code, and select Import React code from the app builder. Learn more about how it works.

Apps created with the new app builder can now be protected and checked into your chosen Source Control Manager (SCM). Source Control lets organizations manage changes using remote SCM providers GitHub, GitLab, AWS CodeCommit, Bitbucket, and Azure Repos. Using this distributed approach, your users can:

• Prevent unwanted changes to apps.
• Work collaboratively and methodically through reviews.
• Edit React code from your preferred development environment.

To get started, first protect your app. Then you can create, publish, and tag new versions.

Builders on cloud instances can now use Retool's MCP server to build apps. Apps are built using React and use Retool's updated app builder. Connect the MCP server to Claude, ChatGPT, Codex, Cursor, Kiro, or another agentic coding environment, and describe the app you want to build. Retool's building agent generates the app and returns a preview link. Publish and manage the app from the app builder.

Beyond initial generation, you can also use the MCP server to:

• Continue building or iterating on an existing app.
• Monitor active builds and view past agent activity.
• Review function runs that require human approval.
• Inspect or read the files of an existing app.
• Cancel a failed or in-progress build.

App building tools require the user to be a builder, and the builder must authorize the mcp:write scope. Refer to the tools reference for the full list.