Pydantic AI 2.58.0 fixes MCP telemetry exposure and adds run deadlines
Updated Pydantic AI
Summary
Pydantic AI ships two medium-severity security fixes, run and request timeouts, delegated-task steering, and new ChatGPT and ElevenLabs integrations.
- Tool
- Pydantic AI
- Category
- Frameworks
- Date
- Pricing
- Not stated in the sources we cited.
v2.58.0 was published at 2026-10-20T04:58:32Z. v1.107.8 was published at 2026-10-20T04:58:47Z. This summary follows the maintainers’ release notes.
What changed
- Version 2.58.0 fixes MCP configuration leaking server URLs, authorization tokens or custom header values into request traces even when content tracing was disabled. Version 1.107.8 backports this fix.
- A second medium-severity fix prevents a UI-adapter history path from executing available tools with client-chosen arguments without a model request. The notes say approval-required tools were not executed by that path, and v1 is unaffected.
- Whole agent runs gain timeout and RunContext.deadline. Model settings add request_timeout and max_retries.
- DelegationTasks.steer can guide a running delegated task. New integrations include an openai-chatgpt provider and ElevenLabsAgentsRealtimeModel.
Before upgrading
The maintainers advise restricting access to historical traces and rotating exposed credentials. Temporal users with tracing enabled should follow the explicit MCP id migration note after in-flight workflows finish. Existing DBOS workflows using Planning and an event_stream_handler may need to finish before upgrading or move to a new application version.
Explore the pydantic-ai hub and frameworks category.
More from Pydantic AI
Pydantic AI 2.67 moves native-tool options
Pydantic AIA long compatibility list: provider_settings for native tools, RepoContext instruction loading, durable guardrails and new Claude and Gemini models.
Category: Frameworks
Pricing: Not stated
Pydantic AI 2.64 adds model fallback controls and artifact scanning
Pydantic AIFallback timing, provider-state boundaries and a Boxd sandbox arrive with harness and evaluation changes.
Category: Frameworks
Pricing: Not stated
Pydantic AI 2.63 adds loop detection and shared spend budgets
Pydantic AINew evaluation timeouts, IPython Code Mode and PostgreSQL-backed spend storage arrive with changed defaults.
Category: Frameworks
Pricing: Not stated
Pydantic AI 2.62 adds steerable subagent tasks
Pydantic AIThe framework adds background-task controls, provider batch requests and mid-conversation thinking settings, with durable replay compatibility cautions.
Category: Frameworks
Pricing: Not stated
Pydantic AI 2.61 adds structured citations and durable extensions
Pydantic AIPydantic AI adds structured text citations, provider normalization and a public durable-engine extension surface, with compatibility changes.
Category: Frameworks
Pricing: Not stated
Pydantic AI 2.60.0 adds Docker sandboxes and hardening
Pydantic AIPydantic AI v2.60.0, published October 23, 2026, adds Docker and BoxLite sandbox capabilities plus sanitization and filesystem hardening.
Category: Frameworks
Pricing: Open source
Pydantic AI 2.57 adds tool-approval review and MCP Apps routing
Pydantic AIThe October 16 release adds ApprovalReviewer, MetaProvider and MCP Apps frontend integration, with realtime compatibility changes.
Category: Frameworks
Pricing: Open source
Pydantic AI 2.55.0 adds Conversation and prompt caching
Pydantic AIPydantic AI 2.55.0, released October 9, 2026, requires Python 3.11 and adds Conversation, a unified cache setting and Postgres stores.
Category: Frameworks
Pricing: Open source
Questions
What is Pydantic AI?
The product site describes it as a model-agnostic Python framework featuring type safety, structured outputs, validation and observability.
Is Pydantic AI open source?
The GitHub repository reports an MIT license.
Which models does it support?
The product site says it supports OpenAI, Anthropic, Google and more.
Filed on Agent Radar. Claims in this note are limited to the sources above.