
Three big additions on the Runbooks side — bring-your-own SSH sandboxes, allow/deny lists for Claude Code tools, and MCP server support — plus a handful of MergeQueue and Releases improvements.
Bring your own sandbox with SSH
Runbooks can now execute steps inside any environment you can reach over SSH, instead of the Aviator-managed cloud sandbox. Point Runbooks at a host, drop in an SSH private key, and your agents will run on infrastructure you own.
- **Pick your sandbox type** from the Runbooks settings page — Cloud (managed by Aviator) or SSH (your own infrastructure).
- **Resilient connections**: automatic retry on SSH failures, reconnection support for long-running sessions, and process-state persistence across reconnects so an interrupted step picks back up cleanly.
- **Self-hosted GitHub support** is included, so SSH sandboxes work the same whether you're on github.com or GitHub Enterprise Server.
Learn more about SSH sandboxes .
Allow lists and deny lists for Claude Code tools
You can now constrain exactly which Claude Code tools — and which command patterns — are available to Runbooks during planning and execution.
- **Allow list and deny list** uses Claude Code's native pattern syntax: Read , Edit , Bash(npm run build:*) , Edit(/path/to/dir/*) , and so on.
- **Denylists take precedence over allowlists**, so a deny rule is always the final word. This makes it safe to start permissive and tighten down as you discover commands you'd rather the agent not touch.
- Separate controls for the **planning** phase (where the agent generates runbook steps) and the **execution** phase (where steps actually run).
MCP server support
Runbooks now speaks MCP (Model Context Protocol), so you can plug your own tools into the agent without waiting for us to build a first-party integration. Configure MCP servers as JSON from the Runbooks settings page:
- Supports stdio , sse , and http transports.
- Combine MCP with the tool controls above to give Runbooks access to your internal systems on your terms.
Also in November
MergeQueue
- Refreshed the Timeline page with better density and faster loads.
- Better handling of GitHub secondary rate limits under sustained load.
- Alt access tokens can now be used for PR creation and PR comments, so teams can keep bot identities separated from human ones.
Releases
- Scheduled crons now evaluate in UTC, removing timezone ambiguity.
- Non-default-branch deployments now display the branch name, making it easier to tell release candidates and environment-specific builds apart at a glance.













