What’s new

You can now use SpotterViz in your embedding application to help your users build and edit Liveboards through a conversational interface. Instead of manually configuring charts and layouts, your users can describe what they want and SpotterViz generates the Liveboard for them, including the new tabs, chart types, data filters, and scheduled deliveries.

For SpotterViz customization in embedded view, the Visual Embed SDK also provides several options to customize the SpotterViz panel experience. For more information, see SpotterViz in embedded Liveboards.

In full application embedding with the V3 navigation and home page experience, ThoughtSpot provides an additional option to switch to the V4 focused home page experience. The focused home page experience provides a streamlined, contemporary experience along with the Spotter panel. For more information, see Customize full application embedding.

ThoughtSpot introduces the following features and enhancements for webhook configuration and management:

The Visual Embed SDK Playground now includes SpotterCode Agent, an AI-powered coding assistant. The SpotterCode panel displays pre-built prompts relevant to the component you are embedding, a prompt interface for user queries, and generates embed code. It generates boilerplate code automatically, accelerates building code and iterating embed configurations.

For more information, see Using SpotterCode in the Playground.

ThoughtSpot now enforces strict org isolation when users authenticate through a per-org identity provider (IdP). When a per-org IdP sends SAML or OIDC group claims that reference Orgs outside its authorized scope, ThoughtSpot silently drops those claims and records them as security audit events. This prevents a rogue IdP administrator in one Org from using group assertions to gain unauthorized access to another Org. Manually-assigned existing Org memberships are unaffected. For more information, see SSO and Org isolation.

The Visual Embed SDK version 1.50.0 includes several new features and enhancements. For more information, see the Visual Embed changelog.

For information about REST API v2 enhancements in this release, see the REST API v2.0 changelog.

You can now apply visualization overrides to charts and tables generated from a search query in ThoughtSpot search and full application embedding. The visualOverrides property in SearchViewConfig and AppViewConfig allows developers to apply at the embed initialization time:

For more information, see Configuring visualization overrides.

This release introduces the following enhancements for Spotter AI workflows and embedded Spotter applications.

The Develop page in the ThoughtSpot UI has been updated with the following enhancements:

To improve load performance and reduce, you can now enable the Liveboard cache option with a Refresh button to allow your users to clear cache and refresh visualization data when required. For more information, see Liveboard browser cache refresh.

The Visual Embed SDK version 1.49.0 includes several new features and enhancements. For more information, see the Visual Embed changelog.

This release introduces new API endpoints for Spotter, connections and trusted authentication. For information about REST API v2 enhancements, see the REST API v2.0 changelog.

For more information, see Liveboard download options.

Users can now edit the underlying query of an answer directly within the Liveboard. When this feature is enabled, the edit button for visualization appears in the answer’s floating toolbar when the Liveboard is opened in the edit mode. Clicking the edit button opens the Answer interface preloaded with the answer’s current query context. You can make the edits and save the changes without leaving the Liveboard.

Embedded Liveboards support advanced controls KPI chart customization. For more information, see KPI charts.

You can centrally control timezone behavior per org and per user in embedded deployments using the new template variable ts_user_timezone and Variable APIs.

For multi-org and multi-tenant environments, each tenant org and user can be configured independently, guaranteeing isolation and consistency of time-based analytics across regions. Administrators can reference the timezone variable in formulas to render and filter timestamp data correctly for each embedded user, without separate content per region.

ThoughtSpot now supports resolving relative date and time keywords, such as today, yesterday, and last 7 days, using a configurable per-user or per-Org timezone, instead of the system default timezone on a ThoughtSpot instance. This feature eliminates timezone-based inconsistencies in multi-region embedded deployments and removes the need for custom workarounds.

For more information, see Timezone-aware keywords and filters.

The Visual Embed SDK version 1.48.0 includes several new features and enhancements. For more information, see the Visual Embed changelog.

This release introduces new Spotter API endpoints and modifications to the agent conversation APIs, and deprecates legacy agent endpoints. For information about REST API v2 enhancements, see the REST API v2.0 changelog.

The Theme Builder now has an AI mode that enables developers to explore and preview style customizations for their embedded application’s branding using natural language instructions and uploaded brand assets. You can execute style updates such as applying colors directly from a PDF branding guide, updating all button shapes with higher contrast, matching a header to a dark background based on a screenshot, or importing typography and spacing from a JSON file. In the AI mode, Theme builder interprets your intent and applies the changes instantly.

For more information, see Theme builder.

In this release version, the following enhancements are introduced in the webhook configuration and delivery status monitoring workflows:

You can now customize the appearance and contents of the chat history sidebar panel in Spotter embedding.

You can also customize the branding and logo in the Spotter chat interface.

For more information, see Customizing chat history sidebar and Hiding logo and brand label in Spotter chat interface.

The following enhancements are introduced in Liveboard export and filtering workflows.

In full application embedded deployments with the V3 navigation and home page experience, the default list page experience is set to ListPage v3 experience.

The ListPage V3 experience provides a refreshed list layout and styling, including the following enhancements:

For more information, see List page customization.

The variable REST API provides new API endpoints for the following bulk operations:

For more information, see Variables documentation.

You can now parameterize multiple properties of metadata objects using POST /api/rest/2.0/metadata/parameterize-fields. The legacy endpoint /api/rest/2.0/metadata/parameterize is deprecated in 26.4.0.cl and later versions, and is replaced with the new endpoint to allow updating multiple fields in a single API request.

For more information, see Metadata parameterization documentation.

ThoughtSpot embedded users can now use REST APIs v2 to organize different ThoughtSpot objects into organizational containers called Collections. These objects can be Liveboards, Answers, data models, tables, and even other Collections.

For more information, see Collections.

For information about the new features and enhancements introduced in Visual Embed SDK version 1.46.0, see the Visual Embed changelog.

For information about REST API v2 enhancements, see the REST API v2.0 changelog.

You can now configure ThoughtSpot to deliver webhook payloads and attachments directly into your own Amazon S3 storage using secure AWS cross-account access. To enable this integration, your AWS administrator must create an IAM role with S3 permissions and trust policy, and then register a webhook in ThoughtSpot to deliver the payloads and attachments directly to your S3 bucket.

For more information, see Amazon S3 storage integration for webhook delivery.

HostEvents in the Visual Embed SDK are enhanced to improve event routing and context targeting in ThoughtSpot embedded applications.

Developers can use the page context framework in the SDK to route host events to a specific UI layer and align user experience with the product UI behavior in multi-modal contexts.

For more information, see Context-based execution of host events.

The legacy JWT-based approach that uses filter_rules and parameter_values to implement Attribute-Based Access Control (ABAC) is deprecated.

As part of this deprecation, the following changes have been introduced to the custom authentication token API workflow and REST API Playground:

Existing ABAC implementations that use filter_rules will continue to function until further notice. However, we strongly recommend migrating your legacy ABAC implementation to the ABAC via RLS method that uses custom variables. For migration steps, refer to the ABAC migration guide.

For new deployments, use ABAC via RLS with custom variables and pass data security attributes through the variable_values property in the custom access token, and define your RLS rules based on those variables. For more information, see ABAC via RLS.

Starting with the 26.3.0.cl release, ThoughtSpot supports publishing Spotter coaching information to other Orgs. Coaching changes from the primary Org are synchronized with the data models published in secondary Orgs.

Administrators and users with edit access to data models can programmatically control user access to Spotter coaching information using the object privilege REST API endpoint, /api/rest/2.0/security/metadata/manage-object-privilege. They can assign SPOTTER_COACHING_PRIVILEGE to other users and user groups, allowing access to the coaching information without requiring data model editing or administration privileges.

Users and groups with SPOTTER_COACHING_PRIVILEGE can import and export coaching TML on data models in the source and destination Orgs where the model is published, and can also share these objects with other users and groups.

For more information, see Spotter data model instructions access.

The height and aspect ratio of the logo in the top-left corner of the ThoughtSpot application interface have been updated for visual alignment and consistency across pages. This enhancement is available only in the V3 navigation and home page experience.

If you have embedded the full application with the V3 navigation experience, you may notice that the logo appears smaller in the top navigation. This is a design update and does not require any configuration changes to your current embedding implementation. However, we recommend that you review the logo size and appearance, and adjust your custom logo if necessary.

For information about adding a custom logo image, see Customize application logo and favicon.

For information about the new features and enhancements introduced in Visual Embed SDK version 1.46.0, see the Visual Embed changelog.

For information about REST API v2 enhancements, see the REST API v2.0 changelog.

ThoughtSpot introduces SpotterCode, an AI-powered Model Context Protocol (MCP) extension for Integrated Development Environments (IDEs) such as Cursor, Visual Studio Code, and Claude Code. When integrated, SpotterCode enables the AI agent in the IDE to access ThoughtSpot SDKs and API documentation resources and provide in-context coding assistance to developers embedding ThoughtSpot content within their applications.

SpotterCode is available as an Early Access feature and can be integrated with development environments that support MCP servers and tools. For more information, see SpotterCode, Integrating SpotterCode in IDEs, and SpotterCode prompting guide.

You can now embed the Spotter 3 experience, which introduces several new capabilities, agentic analytics, and an enhanced user experience. Spotter 3 is an Early Access feature and is disabled by default on ThoughtSpot embedded instances.

For more information, see Embed AI Search and Analytics and Spotter embedding documentation.

To prevent excessive requests from reaching application servers and ensure API stability and service quality for REST API users, ThoughtSpot enforces rate limits on public API requests per client IP. These limits are applied globally at the cluster level for all public API requests, including calls to both REST API v1 and v2 endpoints.

For more information, see Rate limits for REST APIs.

Security settings that ensure data security and a seamless embedded user experience can now be configured through REST APIs v2. Administrators and developers can configure allowlists for:

For more information, see Security Settings.

ThoughtSpot supports secure WebSocket (wss://) endpoints for external tool script integrations, for example, tools that open WebSocket connections from the browser.

To allow a WebSocket host, add the corresponding wss:// URL to both your CSP allowlists. Only hosts explicitly listed with the wss:// protocol are permitted. Existing https:// entries in the allowlists remain unchanged and continue to function as expected.

For more information, see External tools and script integration.

For information about the new features and enhancements introduced in Visual Embed SDK version 1.45.0, see the Visual Embed changelog.

For information about REST API v2 enhancements, see the REST API v2.0 changelog.

Theme Builder is now generally available (GA) and will be rolled out to all ThoughtSpot instances in customer deployments over the next few weeks.

When this feature is enabled on your instance, you can access it from the Develop page in ThoughtSpot and use it to customize styles and UX themes directly within the product.

For more information, see Theme Builder.

The new V3 navigation and home page experience is now generally available (GA) and can be enabled on ThoughtSpot embedded instances.

The default UI experience in full application embedding remains the classic (V1) experience until further notice. Developers embedding the full ThoughtSpot application can enable the V3 experience in their applications by setting the appropriate configuration options in their embed code.

For more information, see Customizing full application embedding.

You can now create formula variables using the Variable REST API and use these variables in RLS rules for a specific data context and in ABAC token requests to dynamically assign security attributes to users.

For more information, see ABAC via RLS with variables.

ThoughtSpot introduces new REST APIs for the following Spotter workflows:

For more information, see Spotter APIs.

You can now intercept API calls from the embedded ThoughtSpot application using the interceptUrls attribute in the Visual Embed SDK. This feature lets you control API requests in your embedding application and use embed events to modify, block, or handle requests before they are sent to the backend. For more information, see Intercept API calls and search requests.

You can now replace or customize the chart switcher toggle and icons in the Charts drawer on an Answer or visualization page using SVG sprites. Previously, these icons were fixed to ThoughtSpot defaults and were not configurable. In the new version, these icons are available as SVG components and can be replaced by developers through the icon customization framework as needed.

The SDKs for embedding ThoughtSpot components in mobile apps are now Generally Available (GA). For more information about the SDKs and how to embed a ThoughtSpot component in a mobile app, see Mobile embed documentation.

For information about the new features and enhancements introduced in Visual Embed SDK version 1.44.0, see Visual Embed changelog.

For information about REST API v2 enhancements, see REST API v2.0 changelog.