> For the complete documentation index, see [llms.txt](https://docs.taskade.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.taskade.com/changelog/changelog-2026/may-2026/may-26-2026.md).

# May 26, 2026

Taskade developer changelog — May 26, 2026: App Secrets Vault, Outbound Proxy for External API Calls.

{% hint style="info" %}
**Developer highlights.** This section tracks API, MCP, SDK, automation, and Taskade Genesis platform changes for developers. For the full product changelog see [taskade.com/changelog](https://www.taskade.com/changelog); for release newsletters see [taskade.com/blog/updates](https://www.taskade.com/blog/updates).
{% endhint %}

## What's New:

### App Secrets Vault

Genesis apps now have a dedicated Secrets vault for storing sensitive values such as API keys and tokens used by the app at runtime. Secrets are stored encrypted and injected at execution time rather than hardcoded in app logic.

### Outbound Proxy for External API Calls

Genesis apps can now route outbound HTTP requests through Taskade's managed proxy. This allows apps to call external APIs without exposing the origin IP and provides a consistent egress point for access-control allowlisting.

### Publish Blocked on Hardcoded Secrets Detection

Before an app is published, Taskade scans for patterns that look like hardcoded secrets (API keys, tokens, passwords). If any are found, publishing is blocked with a warning, nudging developers to move credentials into the Secrets vault instead.

## Improvements & Fixes:

* Improved developer experience when managing external API integrations in Genesis apps.