Twenty CRM 2.46 reshapes sharing API, adds AI approvals
Twenty v2.46.0 landed on October 12, 2026 with breaking sharing API changes, 2FA recovery codes and approval flows for AI tool calls. Check before upgrading.
The open-source CRM Twenty published v2.46.0 on October 12, 2026. It reshapes the record sharing API, adds approval flows for AI tool calls and ships admin-issued two-factor recovery codes. The sharing change is breaking, so self-hosters should read the notes first.
What changed
- Breaking: the record sharing API and share panel were reshaped.
- Breaking: the usage limit meter was replaced by a usage unit, and the install-apps onboarding step was removed.
- Application upgrades now run as queued jobs with progress tracking.
- New: admin-issued two-factor recovery codes, a Twenty command line tool and human input steps in agent workflows.
- New: Microsoft Teams tenant claiming and a Teams assistant agent.
- The previous release, v2.45.0 on October 5, hardened two-factor authentication against impersonation and OTP guessing and rolled out record-level sharing in five stages.
Why it matters
A CRM holds your pipeline, so who can see which record is the core question. Twenty is clearly building permissions and agent controls together. Approval flows for AI tool calls are the part we like: letting an agent edit deals is easier to accept when a person can say yes first. For a small sales team that wants an open-source CRM, that is a real reason to look.
What to do now
- Using the sharing API? Test your integrations on a copy before upgrading.
- Review who holds admin rights, since recovery codes are now issued by admins.
Compare more tools on the Sales, CRM & Lead Generation hub.
