Blog · Release · May 30, 2026
Spiralyst Lab v3.3.0 is live.
A quick note from the studio: v3.3.0 is out today, on spiralyst.com/download. The headline change is a security upgrade to the local automation API — the same surface that lets scripts, MIDI/OSC bridges, and AI agents drive the app.
The API still binds 127.0.0.1 only, but every request now also requires a
per-launch bearer token. Both the port and the token are written to
~/.spiralyst-lab/api-port.json on every launch (and shown in-app under
About ▸ Spiralyst Lab with Copy buttons), and both rotate at
the next launch. It's the same model
Jupyter
and VS Code use — software running as you can drive the app; nothing else can.
If you're driving Spiralyst Lab from the Claude Code reference skills, a custom script,
or a MIDI/OSC bridge: read the new port + token from
~/.spiralyst-lab/api-port.json and send
Authorization: Bearer … on every request. The
Automation & API page has the updated code
snippets, and the full contract is hosted at
/docs/agent-control.md for direct read access
from agents. The earlier developer blog post,
Drive Spiralyst Lab from Claude, has
been refreshed to match the v3.3.0 contract.
New here? Spiralyst Lab is $24.99 for a one-year license, direct download from spiralyst.com. v3.3.0 is what you'll get when you download today.
Already a customer? v3.3.0 is included in your annual license — grab the latest build from spiralyst.com/download and replace your copy.