# MLflow v3.13.0

- Product: MLflow (https://whatsnew.fyi/product/mlflow)
- Vendor: LF AI & Data
- Date: 2026-06-01
- Version: v3.13.0
- Original notes: https://github.com/mlflow/mlflow/releases/tag/v3.13.0
- Permalink: https://whatsnew.fyi/product/mlflow/releases/v3.13.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Role-Based Access Control system with reusable roles and workspace-scoped grants
- **added** — Admin UI for managing users, roles, and permissions on self-hosted MLflow
- **added** — Trace retention and auto-archival to move aged trace span data to object storage while keeping traces readable in UI and APIs
- **added** — One-click observability and governance for coding agents including Claude Code, OpenAI Codex, and Gemini CLI through the AI Gateway
- **added** — New engines for MLflow Assistant including local Ollama models, OpenAI Codex CLI, and MLflow AI Gateway endpoints
- **added** — Official production-ready Helm chart for deploying MLflow tracking server to Kubernetes clusters
- **added** — Hermes Agent support to route through AI Gateway and capture end-to-end traces over OpenTelemetry
- **added** — Span log levels with Python-logging-style severity levels and Minimum log level filter in trace UI
- **added** — AI Gateway as a backend for MLflow Assistant
- **added** — Unified per-user permission APIs under /mlflow/users/permissions/*
- **added** — mlflow.genai.test_agent for automated agent stress-testing
- **added** — Raw proxy endpoint at /gateway/proxy/{endpoint_name}/{path}
- **added** — Ollama as assistant provider
- **added** — Prompt promoted to a first-class RBAC resource_type
- **added** — Link entity and LiveSpan.add_link() for OpenTelemetry Span Links
- **changed** — Permission system overhauled into unified Role-Based Access Control model replacing legacy per-resource permission tables, REST endpoints, and client methods
- **changed** — default_permission now acts as a floor rather than an override
- **changed** — Workspace USE grant is now sufficient to create experiments and registered models
- **changed** — Default optimizer used by judge.align() is now MemAlign
- **removed** — MLServer as a pyfunc serving backend and the previously deprecated enable_mlserver option
- **removed** — mlflow autolog claude no longer installs the old Python autolog hook in favor of the official Claude plugin
- **fixed** — Pointing tracking or model registry store at local file-system path now raises an error by default unless MLFLOW_ALLOW_FILE_STORE=true is set

MLflow 3.13.0 includes several major features and improvements

###### Major New Features

- **🔐 [Role-Based Access Control & Admin UI](https://mlflow.org/docs/latest/self-hosting/security/role-based-access-control)**: A full RBAC system with reusable roles and workspace-scoped grants, plus a new web Admin UI for managing users, roles, and permissions on self-hosted MLflow.
- **🗄️ [Trace Retention & Auto Archival](https://mlflow.org/docs/latest/genai/tracing/observe-with-traces/archive-traces)**: Automatically move aged trace span data out of your SQL backend into object storage (e.g. S3) while keeping every trace fully readable in the UI and APIs.
- **🤖 [One-click observability & governance for coding agents](https://mlflow.org/docs/latest/genai/governance/ai-gateway/coding-agents/)**: Onboard Claude Code, OpenAI Codex, or Gemini CLI to the AI Gateway in one click for tracing, usage tracking, budgets, and guardrails.
- **✨ [New engines for MLflow Assistant](https://mlflow.org/docs/latest/genai/getting-started/try-assistant/)**: Run MLflow Assistant on a local Ollama model, the OpenAI Codex CLI, or any MLflow AI Gateway endpoint, in addition to Claude Code.
- **☸️ [Helm chart for Kubernetes](https://mlflow.org/docs/latest/self-hosting/kubernetes-helm)**: An official, production-ready Helm chart for deploying the MLflow tracking server to any Kubernetes cluster.
- **🌐 [Hermes Agent support](https://mlflow.org/docs/latest/genai/governance/ai-gateway/coding-agents/hermes-agent)**: Route the Hermes Agent runtime through the AI Gateway and capture its end-to-end traces in MLflow over OpenTelemetry.
- **🪵 [Span log levels](https://mlflow.org/docs/latest/genai/tracing/app-instrumentation/logging)**: Python-`logging`-style severity levels on spans, with a "Minimum log level" filter in the trace UI to hide low-level noise.

###### Breaking Changes

- The permission system has been overhauled into a unified Role-Based Access Control model. The legacy per-resource permission tables, REST endpoints, and client methods are removed and replaced by roles backed by `role_permissions`, `default_permission` now acts as a floor rather than an override, and a workspace `USE` grant is sufficient to create experiments and registered models. Code that relied on the old per-resource permission APIs must migrate to the new role-based APIs. (#22855, #22859, #22941, #23337, #23379, @PattaraS)
- MLServer is no longer available as a pyfunc serving backend. The previously deprecated `enable_mlserver` option has been removed, so `mlflow models serve` always uses the built-in scoring server. (#23356, @harupy)
- `mlflow autolog claude` no longer installs the old Python autolog hook; Claude Code tracing is now provided by the official Claude plugin, which must be installed separately. (#23339, @B-Step62)
- The default optimizer used by `judge.align()` is now MemAlign, so existing alignment workflows may produce different judges than before unless an optimizer is passed explicitly. (#23254, @veronicalyu320)
- Pointing the tracking or model registry store at a local file-system path now raises an error by default; set `MLFLOW_ALLOW_FILE_STORE=true` to keep using a file-based store. (#22773, @harupy)

###### Other Assorted Features & Improvements:

- [Gateway] Support AI Gateway as a backend of MLflow Assistant (#23559, @B-Step62)
- [UI] Make admin pickers target the workspace they're granting into (#23543, @PattaraS)
- [UI] Bring direct-grant picker to parity with role picker (#23420, @PattaraS)
- [UI] Cherry-pick: Add OpenAI Codex CLI as assistant provider (#22566) (#23517, @B-Step62)
- [Tracing] Support settings.local.json for Claude Code tracing config (#23285, @Gkrumbach07)
- [UI] Add coding-agent endpoint creation flow in AI Gateway UI (#23430, @TomeHirata)
- [Tracking / UI] Unified per-user permission APIs: `grant` / `revoke` / `get` / `list` under `/mlflow/users/permissions/*` (#23247, @PattaraS)
- [Evaluation / Tracing]

_[Truncated at 4000 characters — full notes: https://github.com/mlflow/mlflow/releases/tag/v3.13.0]_