What's new
Changelog
Every release of SupportFlow, newest first: the Server that runs the service, the SupportFlow / KnowledgeFlow Client on your PC, and the Endpoint on your stations.
Last updated 2 October 2026
Server Listener
The service your stations and Clients connect to: the customer portal, the AI tools and our support team's desk.
- v1.1.129Latest
- In the remote viewer, pointing at something on the station's screen now moves the station's pointer there too, without clicking, so menus that open when you point at them, and tooltips, appear as they would at the station (KQS Endpoint 1.0.259 or later).
- The remote viewer's picture updates more often: for a station that can take it, our server lets the next picture start on its way while the last one is still arriving (KQS Endpoint 1.0.259 or later).
- The viewer's Quality settings describe the new pictures: Low (Responsive) at three-quarters size, Med in 65,536 colours, and High with sharper photographs (KQS Endpoint 1.0.259 or later).
- Our server carries a station's answer to whether a press in the remote viewer landed on a window's title bar, so the viewer can move that window by its outline (SupportFlow Client 1.5.46, KQS Endpoint 1.0.259 or later).
- Our server passes on which of a station's monitors a remote-viewer picture shows, and asks the station for another monitor when the viewer picks one (SupportFlow Client 1.5.46, KQS Endpoint 1.0.259 or later).
- Help: Remote in, the Viewer Type setting, and the Native Viewer's File Transfer window (SupportFlow Client 1.5.46).
- v1.1.128
- Help: the Sealed Viewer's padlock and Actions menu (SupportFlow Client 1.5.45).
- v1.1.127
- Help: Medium Security now seals station commands and their answers end to end, as High Security does, and the Sealed Viewer works in both (SupportFlow Client 1.5.44).
- v1.1.126
- Fixed: text typed in the remote viewer did not reach the station. What you type, and the keys you press, now arrive at the station as typed.
- The remote viewer's Actions menu offers Ctrl+Alt+Del for a station that supports it, signed like the viewer's other station actions. Stations that do not support it never show the item.
- Our server passes the keystrokes from the SupportFlow Client's new Sealed Viewer on to the station without being able to read them (SupportFlow Client 1.5.43).
- v1.1.125
- In the SupportFlow Client's station Properties window, a station shared with you now starts with a Sharing section: who shared it with you, and whether the share is Limited or Unrestricted (SupportFlow Client 1.5.42 shows it as it is).
- v1.1.124
- The SupportFlow Client's new Profile window gets your account's details from our server: its status, and anything about it that needs your attention such as an expired service plan, your role and your organization, your service plan, and when the account was made (SupportFlow Client 1.5.42).
- v1.1.123
- Endpoint installers are named for your organization's code - setupEndpoint_ followed by the five characters - and the file itself is the same for everyone: nothing is added to it any more. A station installed from it asks our server which organization the code names, and learns your organization's Administrator's and Managers' keys there, so it accepts its first authorization only from one of them (KQS Endpoint 1.0.258).
- Looking an organization up by an installer's code is limited: an address that tries too many codes that name nothing has to wait half an hour.
- The SupportFlow Client can rename your organization and save its Endpoint installer from the SupportFlow Stations window (SupportFlow Client 1.5.41).
- v1.1.122
- Help: the Endpoint page explains the small white K a station shows near the bottom-right corner of its screen while someone is viewing it remotely (KQS Endpoint 1.0.257, which the SupportFlow Client hands out from 1.5.40).
Show 145 earlier releases
- v1.1.121
- A station's Properties window shows, under Network, how long a request to each of our servers takes from that station - Round trip to each server, in milliseconds, with the one it reports to marked - and its full record and history carry the same figures (KQS Endpoint 1.0.256 or later).
- Help: the SupportFlow Stations window's Help menu - Online Documentation, Support Contact, Check for updates and About (SupportFlow Client 1.5.39).
- v1.1.120
- A station's details - the SupportFlow Client's Properties window, and the full record your AI tools read - no longer list seven fields left over from the kiosk software this system started with: a bet server's memory, two programs' running states, a start-up program's state, the hub server's connection failures today and a count of unsynced records. Nothing used them. The server no longer stores them, and removes them from the records it already holds during its next overnight maintenance.
- In the Properties window's Other details, how long KQS Endpoint has run on the station in all (Uptime_AppLifetimeSec) is read out beside the seconds - in months, days, hours, minutes and seconds, a month counted as 30 days.
- Help: double-clicking a station in the SupportFlow Stations window opens it, the same as Access now (SupportFlow Client 1.5.38).
- v1.1.119
- Help: the SupportFlow Stations window's new MCP menu - Install / Reinstall Claude MCP, Install / Reinstall ChatGPT and MCP Info (SupportFlow Client 1.5.37).
- v1.1.118
- Help: the Endpoint page explains when KQS Endpoint uses the administrator rights of the Windows account it runs as (KQS Endpoint 1.0.254).
- The remote viewer's Copy from remote and Paste to remote try once more by themselves if the first attempt misses while the station is starting its side, so a clipboard that used to need a second click now works on the first.
- v1.1.117
- Every Share access - in the SupportFlow Client, on your account page and in SupportFlow Lite - offers the two kinds in one drop-down: Limited Share (the default) or Unrestricted Share. The sentence under it follows your choice.
- An Unrestricted Share is now a real hand-over: the account it was shared with can take the station over, including taking your organization's own ControlKeys off it so that you can no longer reach it. Choose it only for somebody who must be able to run the station on their own. It still asks you to type their email address to confirm, and taking a station over needs KQS Endpoint 1.0.253 or later on it.
- The account page's separate Share without restrictions item is gone: its Share access asks for the kind instead.
- Your organization's Audit Log says when an account with unrestricted access takes a ControlKey off one of your stations.
- In SupportFlow Lite, a station shared with you without restrictions has Keys on this station: the keys it trusts, whose each is, and - after a red confirmation - taking them off.
- New in Help: Sharing stations - what a Limited Share and an Unrestricted Share each let the other account do, side by side, when to choose each, and how to undo each.
- The SupportFlow Client's Stations window has Edit tag and Properties for each station: its details, its screenshot, and its tag, description and notes to change (SupportFlow Client 1.5.36).
- A remote viewer whose station is slow to start keeps its spinner while the station starts its side, instead of showing a time-out message behind it. If a station does not answer, a message takes the spinner's place - never both at once - and the viewer still connects if the station answers in the next few minutes. The Support Viewer does the same.
- A remote viewer gets its authorization over the connection it already has, so a slow station's picture appears sooner.
- A remote viewer denied from your SupportFlow Client's notice ends its own link at once and says why, and the station's access for it ends there and then. The Support Viewer does the same (SupportFlow Client 1.5.36).
- The Support Viewer's Stop ends its session with the station at once again.
- v1.1.116
- The SupportFlow Client's Stations window can show a small preview of a station's latest screenshot (SupportFlow Client 1.5.35).
- The remote viewer's Actions menu has Paste to remote and Copy from remote, in a section of their own: text you copied on your computer is pasted where the station's cursor is, and text copied on the station goes on your clipboard - up to 4,000 characters at a time. Both are signed like the viewer's other actions, and your organization's Audit Log records each one without the text.
- The remote viewer's Quality has four settings: Low (Minimize Bandwidth), Low (Responsive) - the same pictures, up to 20 a second - Med and High. In Med and High, photographs and pictures on the station's screen are sent as JPEG while text and controls stay sharp: a busy screen in High takes about a quarter of the data it did, and in Med about a third less. These need KQS Endpoint 1.0.252 or later.
- The remote viewer's Quality and View Size lists are easy to reach: they stay open while you move across to them at your own pace, even on a slant, and they also open on a click or a tap.
- Over the remote viewer's picture the pointer is an ordinary arrow, and a click lands exactly at its tip.
- The Support Viewer's clicks land in the right place when its window is narrower than the station's screen.
- A command for a station name that no station has ever reported under is answered at once instead of waiting, and when the name is the Windows name of one of your own stations, the answer says which station name to use.
- Share access offers two kinds of share. Limited is the share you know: the other account can run commands on the station, and you can revoke it at any time. Unrestricted gives the other account total control of that station - including renaming, decommissioning and sharing it on - and once they approve it, it cannot be revoked remotely; the only ways back are Reset Authorization at the station or decommissioning it. Unrestricted asks you to type their email address to confirm, and needs KQS Endpoint 1.0.252 or later on the station.
- A limited share that was approved can be made unrestricted later, with the same confirmation. An unrestricted share is never turned back into a limited one.
- The station stays your organization's whichever kind you choose: your plan, your bill and your list are unchanged. Your organization can still decommission it; the confirmation says when another account has unrestricted access.
- New for the SupportFlow Client's Shared Stations window: the stations your organization has shared, who with, which kind, and what can still be done with each.
- In SupportFlow Lite, a station shared with you without restrictions offers Rename, Decommission (for everyone, after a warning), Share access and Give up my access. A limited share's menu is unchanged.
- v1.1.115
- The remote viewer has an Actions menu beside the live indicator: File Transfer, Quality, View Size, Task Manager, Reboot and Disconnect.
- The remote viewer's Quality is Low, Med or High, and the picture rate is automatic: it goes as fast as your connection and the station can manage (Low at most 5 pictures a second). Only what changed on the station's screen is sent. It starts at Med and Fit to window.
- The remote viewer can start Task Manager on a station and reboot it (it asks before a reboot). Both are signed by your SupportFlow Client or SupportFlow Lite.
- Disconnect in the remote viewer ends its link and the station's access for it at once, and closes the window when it can. Closing the last viewer window of a station does the same.
- The Support Viewer's Stop button now stops the station's side of the session too.
- A remote viewer's authorization now lasts a minute at a time, renewed while the viewer is open.
- The remote viewer's File Transfer window has this computer on the left and the station on the right, a path you can type for the station, a transfer queue, and it opens on the folder you used last on that station.
- Several remote viewers can be open at once - of several stations, or two of the same one - and closing or disconnecting one leaves the others working. A viewer in a background tab or a minimized window pauses its picture until you look at it again.
- In the remote viewer and the Support Viewer you can drag on the station's screen and scroll it with the mouse wheel (Shift for sideways, Ctrl to zoom the program under the pointer). This needs KQS Endpoint 1.0.251 or later on the station.
- The remote viewer shows a spinner while it connects to a station, and again while it reconnects.
- v1.1.114
- The Support Viewer opens only on stations that have been authorized - accepted in your SupportFlow Client - and says so when a station is not.
- The Support Viewer's File Transfer window lists every file it writes to a station, with the full path and the date and time.
- Fixed: taking a station out of a group could also take a station of the same name out of its group in another organization.
- Decommissioning a station now removes only that machine, not other machines with the same name.
- v1.1.113
- The Support Viewer's File Transfer moves files of up to 2 GB to and from stations running KQS Endpoint 1.0.249 or later, with progress for the whole trip, and its window says in small print how large a file the station takes.
- SupportFlow Lite downloads and sends files of up to 2 GB, and each account's SupportFlow Lite file space is 2 GB.
- v1.1.112
- Files of up to 2 GB can be sent to and fetched from stations running KQS Endpoint 1.0.249 or later (512 MB before). A file larger than a station can take is refused before anything is sent.
- The Support Viewer's File Transfer refuses a download larger than it can move (30 MB) instead of saving only part of the file.
- v1.1.111
- Command Center is marked BETA on its views, its list of views and its settings: parts of it are still being built.
- The Help describes the SupportFlow Client's simpler Share access and Revoke access (Client 1.5.30).
- v1.1.110
- The Help describes the SupportFlow Client's new Welcome window and switching from Low Security Mode (Client 1.5.29).
- v1.1.109
- Fixed: for an account that belongs to more than one organization, the SupportFlow Client could treat the organization's Administrator or a Manager as a User, so Share access was greyed out.
- v1.1.108
- The Help explains where a station's name and identity can be read by your own software (Endpoint 1.0.248).
- v1.1.107
- KQS support can see and adjust your account's speed settings from your account record when you contact us.
- The Help pages open with a note from the designer.
- v1.1.106
- Send one file to several stations in one go: the file is uploaded once and every station fetches its own copy at the same time. The transfer ends by saying which stations have the file.
- Each plan now sets how fast each person may send and receive through SupportFlow - each person on their own, not shared across the organization. The free plan allows 512 KB/s each way.
- v1.1.105
- Your account page's organization panel starts with your organization's icon and name.
- v1.1.104
- Deleting an account revokes its ControlKeys. A station that was switched off at the time has them removed by your SupportFlow Client when it is back.
- Share access: your organization's Administrator or a Manager can let another SupportFlow account work on one of your stations - right-click it, Share access. It shows up in their SupportFlow Client to approve, and lasts 24 hours until they do.
- A shared station carries a "Shared with N others" badge on your account page: point at it to see who, click it to stop sharing. A station shared with you can be removed from your list at any time.
- v1.1.103
- SupportFlow Lite has an Upload Bin: drop files from your computer into it, then ask the assistant to send one to a station. Each send is signed with your ControlKey after you allow it.
- Tools accept a station's clientGuid on its own, as their descriptions say. A command that has to be signed is told to name the station as well, so the SupportFlow Client can sign it.
- Tools can be switched off one at a time on the server. A tool that is off is not offered to assistants, and answers that it is not available if it is called.
- v1.1.102
- Help: the ControlKey page now says plainly that your ControlKey stays on your PC in Medium and High Security mode.
- v1.1.101
- Help: a two-minute video now opens "What is SupportFlow and KnowledgeFlow", explaining both products from the ground up.
- v1.1.100
- Help for Endpoint 1.0.246: the watermark checkboxes in the station's status window, and the folder check in Setup.
- v1.1.99
- When High / Medium Security is already on, choosing it again in the account menu explains what that means for AI apps on the web and SupportFlow Lite, with advice on not saving your ControlKey password in the browser.
- v1.1.98
- Ready for the next Endpoint: each station is told the name and group your organization shows it under, including its number when two of your stations share a name.
- A station found to be a copy of another installation, and given its own identity again, now restarts quietly in the background instead of opening its setup screen.
- v1.1.97
- Each station's most recent screenshot is now kept until a newer one replaces it, however long the station has been quiet. A station's telemetry history holds no screenshot data at all.
- v1.1.96
- Station screenshots are no longer kept as history: our servers keep only each station's most recent screenshot, which replaces the one before it, and remove it once it is an hour old.
- v1.1.95
- Two of your machines with the same station name are now both kept and shown separately - as NAME (1) and NAME (2) until you rename one - on your account page, in SupportFlow Lite, in the Command Center and to your AI assistant. Ask for one by its number, or by its group and name (North/LOBBY-01).
- Each organization sees only its own machines, even when another organization uses the same station name.
- SupportFlow Lite: the station menu offers Same-named stations... when more than one machine uses a station's name, with each machine's GUID and when it last reported. Your organization's Administrator or a Manager can remove an old entry - confirmed by typing its GUID, with its history moved to the station that is responding - and add or leave out a new machine reporting under a name you already use.
- Support Viewer: the View list offers 50%, 75%, 100%, 150% and 200% as well as Fit to Window, and the screen stays centred.
- Support Viewer: hover over the station's name at the top left to see its CPU, memory and disk use and its version of Windows.
- Links to the portal that the assistant gives you now always use www.koquelani.com.
- Support Viewer: the File Transfer window can be moved and resized, stays open until you close it, and Minimize keeps it at the bottom of the screen - with a progress bar while a file is transferring - so you can carry on working on the station.
- SupportFlow Lite: your avatar is shown beside your messages.
- Help: Stations that share a name.
- v1.1.94
- Command Center: a new Configure Command Center page - open it from the Command Center panel on your account page. Make up to 20 views, each with its own link, a title shown on its screens, and either all your stations or just the ones you choose, so each department or division can have a wall that shows only its own stations.
- Configure Command Center shows, next to each view, how many remote viewers have opened it in the last 10 minutes.
- Command Center: an existing Command Center link keeps working - it becomes your first view, showing all your stations. The limit of 20 places watching at once now applies to each view.
- Help: Command Center describes setting up views for departments, and how to replace a link that has reached the wrong people.
- v1.1.93
- SupportFlow Lite: fixed the page freezing - and the browser eventually running out of memory - while an answer that contains a table was still arriving.
- SupportFlow Lite: a small gauge under the message box shows how much of the conversation's room is used; click it for Total Usage - this month's allowance as a bar, and the date it resets on.
- SupportFlow Lite: a feedback button at the bottom left sends KQS support a suggestion, a bug report or anything else - with this session's details if you choose to include them, and whether we may contact you.
- SupportFlow Lite: File Transfer in a Support Viewer opened from SupportFlow Lite now works, signed by SupportFlow Lite like every other command.
- Remote Access in SupportFlow Lite, and the Support Viewer, now say when a station's screen is a Remote Desktop session, where the viewer's clicks and typing cannot reach it.
- SupportFlow Lite: click a screenshot in the chat to see it enlarged, at the station's full resolution, and save it - with Save or your browser's own Save image as.
- Help: the context gauge and Total Usage, sending feedback, enlarging and saving a screenshot, and File Transfer from SupportFlow Lite.
- v1.1.92
- When your account belongs to more than one organization, your account page, SupportFlow Lite and My Organization now always show the one you run - whatever the organizations are called. Renaming an organization no longer changes which one you see.
- Mistype a station's name to your AI assistant and it now suggests the station you probably meant, from your own list, instead of only saying the name is not yours.
- SupportFlow Lite: ask for a station's screenshot and the picture is shown on its own in the chat; the details of the step that fetched it stay folded until you open them.
- v1.1.91
- Your organization's Administrator can now give the organization an icon - a PNG or JPEG picture of up to 1 MB - by clicking the square beside its name on the account page. Everyone in the organization sees it there, and beside the organization's name in SupportFlow Lite.
- Ask your AI assistant to remote you into a station and it gives you a temporary Support Viewer link for that station. In SupportFlow Lite, a Remote Access button appears in the chat instead.
- Ask to see a station's screen and the assistant shows its latest picture first, then offers the live view in case you want to watch or work on it.
- Ask your AI assistant to decommission or remove a station and it tells you where to do it - your account page or SupportFlow Lite - and whether you may. It never removes a station itself.
- Help: the organization's icon, remote access from your AI assistant, and removing a station.
- v1.1.90
- SupportFlow Lite: right-click a station for its own menu. Remote Access opens the Support Viewer for it, and Add to group, Rename, Edit Note, Reboot and Decommission are there too; Reboot and Decommission ask before they act.
- SupportFlow Lite: a Log off button beside your name, at the top right, signs you out and takes you back to the sign-in window.
- Groups: anyone in an organization can make groups and file stations in them from SupportFlow Lite (Add to group) as well as from the account page, and both lists show the change straight away.
- Decommissioning a station that another organization also has now asks first, and offers Detach instead: the station leaves your list, and the other organization keeps it as it is.
- Low Security Mode: your organization's Administrator can now renew the ControlKey SupportFlow keeps for your stations, from the Direct MCP access panel; every station moves to the new key by itself.
- Help: the SupportFlow Lite station menu, groups, removing a station, and renewing your ControlKey.
- v1.1.89
- Help: how High Security keeps your commands, their answers and your files sealed end to end.
- Help: Security levels explained now begins with the Low, Medium and High Security levels - how they differ and why you would use each - and has a new section on changing between them: why you would, what each move means, and best practices. Two pictures show the levels side by side and, with a features grid, how you move between them. The Endpoint's modes follow, with the words its own status window shows.
- New Downloads page, open to everyone with no sign-in: the SupportFlow Client, the Claude Desktop extension and the other ways to reach your stations, in the same words as your account page, at www.koquelani.com/services/downloads.
- The SupportFlow Client panel says what High Security gives you: your stations' keys stay on your PC, and our servers can neither make changes on your stations nor see what your assistant's commands contain.
- Plans: an organization with more stations than its plan allows keeps its first stations - in the order they joined - reachable, and up to 50 more listed as Inaccessible: shown on your account page with a note, listed to your assistant by name only, and reachable again by themselves as soon as the plan is increased or other stations are retired.
- A station update signed with a ControlKey that has been withdrawn is now refused before anything is sent to the station.
- v1.1.88
- Your account page now has a Download button for the SupportFlow Client, under a line saying what it is for. The page it opens explains why the Client is the preferred way to connect Claude or ChatGPT to your Endpoints.
- v1.1.87
- The SupportFlow Client link on your account page now says what the Client is for: Download the SupportFlow Client to connect Claude, ChatGPT, or other harness to your Endpoints. It still opens the page with every way to reach your stations.
- Help: how to change your ControlKey password with the SupportFlow Client's new Change my ControlKey button.
- The Claude Desktop extension download now matches SupportFlow Client 1.5.24.
- v1.1.86
- Command Center: click any station for a screen of its own - its processor, memory and disk use over the last 15 minutes to 24 hours, the programs running on it busiest first, its recent Windows events and its hardware. A small blue spinner over a station's icon shows when somebody is using it, and the world map now has country, state and province borders.
- Your account page is simpler: one link, SupportFlow Client and other ways to access stations, leads to a page with the SupportFlow Client (recommended), the Claude Desktop extension, Direct MCP access and SupportFlow Lite, each explained in its own panel. Command Center is now a single checkbox with a link that opens its view in a new window.
- Faster, smaller telemetry history on our servers.
- The AI tools that list and clear a station's queued commands now see every command waiting for it.
- v1.1.85
- New: Command Center - full-screen views of your stations for a wall display or a command center, at a private link that stays the same until you turn Command Center off. No sign-in is needed to view it, and up to 20 places can watch at once. The first view, Fleet Overview, shows your healthy, warning and offline stations, a world map, the kinds of station you have, health by region and the full list. Turn it on from the Command Center panel on your account page.
- SupportFlow Lite: the station list keeps the width you choose (drag its edge) instead of widening for a long description, and its folders stay as you left them.
- v1.1.84
- Add SupportFlow to Claude Desktop in one click: Add to Claude Desktop, beside the SupportFlow Client download on your account page and on the download page, installs it as a Claude Desktop extension. It uses the SupportFlow Client on your PC, and the Help explains how.
- v1.1.83
- If our support team renews or withdraws the ControlKey that SupportFlow keeps for you in Low Security Mode, you are told when you next sign in and by email, and your account page lists any station that needs you, with the steps to bring it back.
- Improvements to account security.
- Improvements to our support team's tools.
- v1.1.82
- Security improvements to how a station is chosen for a request.
- v1.1.81
- Improvements to ControlKey security.
- v1.1.80
- Your account menu has a new Security Mode submenu. It shows whether you are in High / Medium Mode or Low Mode, explains what each one means, and lets you choose Low Mode while no ControlKey is set up yet. Moving to High / Medium is done in the SupportFlow Client, and the menu shows you how.
- SupportFlow Lite now works in Low Security Mode without a ControlKey password. You still allow each command that changes a station before it is sent.
- The SupportFlow Lite on/off switch has moved to My Account in your account menu.
- New accounts start in Low Security Mode.
- Improvements to our support team's tools.
- v1.1.79
- get_config now reads each station's own configuration file - the one you have told it about - instead of one fixed file. The first time, your AI assistant asks you which file and where it is; after that it remembers, in the station's notes.
- v1.1.78
- Improvements to sign-in protection.
- Improvements to our support team's tools.
- v1.1.77
- Leaving Low Security Mode now happens in the SupportFlow Client: when your organization's Administrator sets up a ControlKey there, your stations move to it, and the key SupportFlow kept for you is withdrawn at once and deleted when they have moved.
- The Help explains why we recommend the SupportFlow Client in High Security over the ChatGPT app, and how to switch.
- The SupportFlow sign-in for AI apps is ready for Claude as well as ChatGPT.
- Improvements to our support team's tools.
- v1.1.76
- The SupportFlow Client can now change your account password, from its My Organization page.
- The SupportFlow Client no longer shows your account's own private group by name.
- A small correction to this changelog.
- v1.1.75
- The SupportFlow app connection for ChatGPT and Codex now uses the standard HTTPS port (443); your account page shows its address.
- Improvements to our support team's tools.
- v1.1.74
- When your AI assistant shows the sample stations, it now also explains how to add your own: download the Endpoint installer from your account page and run it on each PC, server or device you want to manage.
- Help: Using your AI assistant explains how to add your own stations.
- v1.1.73
- Two sample stations, SAMPLE-PC and SAMPLE-SERVER, appear in your station list so you can try SupportFlow before installing an Endpoint: ask about their health, telemetry or installed applications.
- The sample stations are not real PCs and refuse commands and file transfers. Ask your assistant to remove them whenever you like (new tool: remove_sample_stations).
- Help: Using your AI assistant explains the sample stations.
- v1.1.72
- The upcoming SupportFlow app connection can also be used from desktop AI apps such as Codex, which sign in through your own PC.
- Improvements to our support team's tools.
- v1.1.71
- Your account page notes that direct MCP access is not available in Medium or High Security mode; the SupportFlow Client is how those accounts connect an AI assistant.
- Help: Low Security Mode explains where to find the connector address, and who can use it.
- v1.1.70
- Help: Security levels explained covers a rekey requested remotely, and the new Disabled state of Endpoint 1.0.242.
- AI assistants are told plainly when a station has been disabled at the station.
- v1.1.69
- Groundwork for using SupportFlow from ChatGPT as an app, with a new Low Security Mode for the accounts that choose it. Not available yet.
- Help: Security levels explained has a new Low Security Mode section.
- Improvements to our support team's tools.
- v1.1.68
- Help: Firewalls and proxies lists the SupportFlow Client's new backup server.
- v1.1.67
- Improvements to our support team's tools.
- v1.1.66
- My Service Plan: the small print now says that choosing a plan takes you to Square's checkout, and to use your SupportFlow account email there.
- v1.1.65
- SupportFlow Lite: shorter sign-in and sign-up windows.
- v1.1.64
- Help: Firewalls and proxies now lists every connection the SupportFlow Client makes - including the web port it uses to check your network and to fetch Endpoint updates - and the address where your AI assistant reaches it on your PC.
- Help: clearer SupportFlow Lite sections on Medium and High Security, on when to use the SupportFlow Client instead, and on how SupportFlow Lite works.
- Version numbers now have three parts.
- v1.1.63.0
- Improvements to our support team's tools.
- v1.1.62.0
- The customer pages now use their own copy of our typeface, so they make no requests to Google Fonts.
- Improvements to our support team's tools.
- v1.1.61.0
- Our customer pages no longer load Google's tag. Google is told only one thing: that an account has just been created - once, when you finish signing up.
- In SupportFlow Lite that one report runs in a sealed frame, kept apart from the page where you type your ControlKey.
- v1.1.60.0
- Improvements to our support team's tools.
- v1.1.59.0
- SupportFlow Lite signs in in two steps - your account first, then your ControlKey - so your browser can save the two as separate logins and fill each box with the right one.
- The customer site's address with no page after it now opens the sign-up page.
- v1.1.58.0
- Improvements to our support team's tools, including SupportFlow Lite allowances set per service plan.
- v1.1.57.0
- Improvements to our support team's tools.
- v1.1.56.0
- SupportFlow Lite: OpenAI now knows each account only by an anonymous code, so anything it does about misuse applies to that one account, never to everyone's.
- v1.1.55.0
- SupportFlow Lite can download a file from one of your stations: ask for it, watch its progress in the conversation (with an X to cancel), then save it in your browser. Up to 1 GB of downloads wait for you at a time, and they are deleted when you sign out or after an hour away.
- SupportFlow Lite: an eye in each password and ControlKey box shows what you typed, so you can check it before you sign in.
- v1.1.54.0
- SupportFlow Lite always asks you to sign in on its own page, and shows the account you are signed in as at the top of the page and in every window that asks for your ControlKey - with Not you? to switch accounts.
- SupportFlow Lite: an account without a ControlKey is asked to create one in a window of its own, typed twice and checked against the ControlKey password rules.
- Improvements to our support team's tools.
- v1.1.53.0
- SupportFlow Lite: a green Download Endpoint button at the top of the station list, and - for an account with no stations yet - a get-started message with the same button in the middle of the page.
- SupportFlow Lite now tells you clearly when an account is not set up for Medium Security, and how to switch it in the SupportFlow Client.
- A 60-second video of SupportFlow Lite, from signing in to approving a command: in Help, and from Watch the demo on the SupportFlow Lite page.
- v1.1.52.0
- New: SupportFlow Lite at /thin - SupportFlow in a web browser, with nothing to install. A chat with your stations beside it: ask about them, select stations to point at them, and approve each command that changes a station.
- Sign in to SupportFlow Lite with your email, password and ControlKey password. Your ControlKey is worked out in your browser and signs your commands there; the ControlKey password is never sent to us.
- Create an account from SupportFlow Lite: choose a ControlKey password as you sign up, confirm your email, and the page carries on by itself.
- Your account page has a SupportFlow Lite panel with an Online / Lite Access switch. SupportFlow Lite works with a ControlKey password (Medium Security); High Security accounts keep using the SupportFlow Client.
- Help: a new SupportFlow Lite topic.
- v1.1.51.0
- Pressing Show for your call-in PIN in the account menu now keeps the menu open, and the PIN stays visible until you leave the page.
- Your account page's first panel is now the Organization panel: the organization's name at the top with its code under it, and, for its Administrator, links to invite people by email or with an invite link.
- The SupportFlow Client panel is shorter: the list of supported systems is on the Client download page.
- v1.1.50.0
- The billing desk's Google Options can now add a separate tag to the My Service Plan page.
- v1.1.49.0
- Help: a new Firewalls and proxies section lists the outbound connections the Endpoint and the SupportFlow Client need. Neither needs a Windows Firewall rule.
- v1.1.48.0
- Getting started in Help now opens with a short video of adding a station, from signing in to asking your AI assistant about it.
- v1.1.47.0
- Help explains downloading the Endpoint installer from the SupportFlow Client.
- v1.1.46.0
- Improvements to our support team's tools.
- v1.1.45.0
- New public SupportFlow Client download page at /clientdownload: the latest installer, its version and its SHA-256, with no sign-in needed.
- The SupportFlow Client download, here and in the portal, now lists the versions of Windows it runs on.
- v1.1.44.0
- Improvements to our support team's tools, including clearer monitoring of our secure certificates.
- v1.1.43.0
- Supports re-signing the keys you have authorized when you switch ControlKey modes in SupportFlow Client 1.5.13.0, so every approval stays signed by a key that is still in use.
- Help covers the new ControlKey page and switching modes.
- v1.1.42.0
- New public changelog at /changelog: every release of the Server, the SupportFlow / KnowledgeFlow Client and the Endpoint, newest first.
- Every portal page now links to the changelog from its footer.
- Plan descriptions on My Plan can now be updated by our team at any time, without a new release.
- v1.1.41.0
- System administrator accounts show a gold “System Admin” badge on the portal's Account panel.
- The Support Tickets page has a “Show Closed Tickets” checkbox, off by default. The list shows your open tickets, or “You have no open tickets.” when there are none.
- v1.1.40.0
- Six MCP tools have clearer names: list_stations, add_station_note, server_status, server_log_tail, rename_endpoint and update_station_endpoint. The old names keep working.
- Every listed tool now carries a title and hints saying whether it is read-only, destructive, safe to repeat, or reaches beyond your own data.
- Retired cached_configstxt, pull_configstxt, kiosk_sweep_rate and three tools that were never implemented; calling one now says what to use instead.
- Tools used only by the SupportFlow Client are no longer listed to AI assistants, and server_log_tail is listed only to administrators.
- Use SupportFlow Client 1.5.12.0 or later to run rename_endpoint and update_station_endpoint on ControlKey-protected stations.
- v1.1.39.0
- Help now covers the new first-run ControlKey setup: a ControlKey password by default, optional “Save ControlKey on this PC”, and Advanced Options for Full ControlKeys or importing a backup.
- v1.1.38.0
- Every account can open the Audit Log; members see their own usage panels there.
- Exporting the Audit Log to CSV remains available to Managers, Administrators and accounts with no organization.
- v1.1.37.0
- Your usage now appears as panels across the top of the Audit Log: data sent, data received and tool calls, this month and all time.
- v1.1.36.0
- Each server now works out its own estimated capacity from its processors, memory, disk and retention, so we can add capacity before it is needed.
- server_status also reports what the server could carry.
- v1.1.35.0
- Telemetry history can now be kept for as little as 15 minutes, and expired history is cleared more often so short retention stays accurate.
- v1.1.34.0
- Stations on Endpoint 1.0.241.0 or later send their kiosk configuration only when it changes, cutting network traffic.
- How often idle stations check in can now be set centrally (5 to 60 seconds, default 10).
- server_status shows the check-in interval and how much configuration traffic has been saved.
- v1.1.33.0
- Planned maintenance: a server can move its stations and Clients to another server before it is updated, so work carries on.
- While maintenance is under way, sign-ups and plan changes pause and My Plan says so.
- New Average Delivery Time figure in server_status: how long a tool call takes to reach its station.
- The mini viewer and Support Viewer now explain when the browser's local-network permission is blocking them from reaching your SupportFlow Client, and name the setting to allow.
- v1.1.32.0
- Telemetry is now gathered in memory and written in batches, greatly raising how many stations each server can carry.
- Expired history is cleared every few minutes in small steps.
- list_kiosks answers faster, and the Support Viewer's online badge reflects a station's latest check-in.
- v1.1.31.0
- Your account page shows your usage: data sent and received through the SupportFlow Client, and tool calls, this month and all time.
- Audit Log and Detailed Logs moved into the My Account menu.
- No limit on how many SupportFlow Client connections a server accepts at once.
- v1.1.30.0
- Usage is now counted per account across every server: data up and down through the SupportFlow Client, and tool calls.
- Improvements to our support team's tools.
- v1.1.29.0
- Improvements to our support team's server monitoring.
- v1.1.28.0
- The Contact us and New support ticket forms are wider on a desktop, with short fields side by side.
- Fixed occasional refusals when choosing or cancelling a plan.
- v1.1.27.0
- Stronger safeguards around plan changes: if they ever have to be paused, My Plan explains why, and payments are still credited.
- v1.1.26.0
- The “Create your account” pages are wider on a desktop, with the password fields side by side.
- Servers now share live status with each other, so our team sees the whole service at a glance.
- v1.1.25.0
- When a plan is retired, current holders keep it, with its limits, renewals and Cancel button; it is tagged “Retired” and no longer offered to anyone else.
- My Plan shows plans in one row that scrolls sideways, with arrow buttons.
- v1.1.24.0
- Telemetry that does not identify its station is now rejected.
- Improvements to our support team's server monitoring.
- v1.1.23.0
- Every portal download has a SHA-256 button beside it: hover to see the hash, click to copy it. Help explains how to check a download with Get-FileHash.
- Mini viewer file transfers now work on ControlKey-protected stations, authorized by your SupportFlow Client with no extra prompt.
- v1.1.22.0
- Database upkeep now runs in one nightly maintenance pass.
- Clearer service log entries when the service stops.
- v1.1.21.0
- Reliability improvement to database maintenance during start-up.
- v1.1.20.0
- Security hardening of ControlKey approvals, new-station enrolment and the Support Viewer.
- ControlKey approvals (new keys, transfers, rotations) are made in the SupportFlow Client and signed with the approver's own ControlKey.
- Endpoint installers downloaded from the portal carry your organization's approved Administrator and Manager keys.
- The Support Viewer and mini viewer are authorized by your SupportFlow Client a few minutes at a time, renewed automatically while you stay signed in.
- Recovery Key support; rotating a key retires the old one, and everything it approved carries on under the new key. New org_anchor_keys tool.
- v1.1.19.0
- After you buy a plan, the account page confirms the new plan in a window of its own.
- Service Plan is now first in the My Account menu.
- Help gains a “Keeping your organization safe” section of practical safety advice.
- v1.1.18.0
- New customer Help in the portal, linked from every page: SupportFlow, Getting started, Security, Using AI, Endpoints and ControlKey.
- v1.1.17.0
- New public “Contact us” page for sales questions, support requests and anything else, with spam protection. Each message reaches our team as a ticket.
- Subscription payments are now matched to the right plan even when the invoice does not name it.
- v1.1.15.0
- When the portal is opened through the company website, links to other sites (such as checkout) reach the right address.
- v1.1.14.0
- The portal can be reached through the company website.
- Short addresses take you straight to portal sign-in.
- Every emailed link (verification, password reset, invitations, join requests, ticket notices) goes through one stable address.
- Security hardening of the customer portal.
- v1.1.13.0
- Every shell_exec answer reminds the assistant which shells are still open and how to close them with shell_close.
- v1.1.12.0
- The service starts much faster: one-time upkeep now runs in the background.
- Improvements to our support team's server configuration tools.
- v1.1.10.0
- Improvements to our support team's server configuration tools.
- v1.1.9.0
- Signing out of or exiting the SupportFlow Client ends every portal viewer authorization issued under your account.
- Works with the SupportFlow Client's new “Portal miniviewer requests” setting (Always Allow, Ask, Always Deny).
- The Audit Log records when portal authorizations end.
- v1.1.8.0
- Every request made to our payment provider on your behalf gets its own Audit Log entry, including the answer.
- Pressing Cancel with no subscription on record now says that nothing was sent.
- v1.1.7.0
- My Plan notes that payment processing is provided by Square.
- v1.1.6.0
- Improvements to our support team's audit tools.
- v1.1.5.0
- The Audit Log has a User Session Summary for each SupportFlow Client session: length, tool calls, data used and location.
- New Detailed Logs switch for the Organization Administrator, recording which stations each person visited and which tools they used.
- The portal Audit Log can be exported to CSV.
- Deleting your account also cancels its subscription; you are warned first.
- v1.1.4.0
- Cancelling a subscription that is already set to end now simply confirms it, and is recorded in your Audit Log.
- v1.1.3.0
- Security hardening of our support team's tools.
- v1.1.2.0
- Every server can now serve our support team, so help stays available during maintenance.
- v1.1.1.0
- Sleep Mode: stations of an organization nobody has signed in to for a long time check in only every 30 minutes, and wake as soon as any member signs in.
- New my_organization tool, behind the SupportFlow Client's My Organization page and available to AI assistants.
- v1.1.0.0
- Several servers can now work together: one holds the accounts and the others keep an up-to-date copy and serve stations and Clients, so the service stays up through updates.
- Stations and Clients can be moved to another server ahead of maintenance.
- The station list shows when each server last heard from a station.
- v1.0.307.0
- Support tickets are now conversations, marked OPEN, WAITING ON YOU or CLOSED. Reply within 30 days to reopen one.
- Tickets waiting on you close automatically after 14 days of silence.
- The Endpoint's Support / Feedback form opens a support ticket too.
- If cancelling a subscription does not complete, plan changes pause until our team sorts it out.
- v1.0.306.0
- Stations whose authorizations were reset with the optional 48-hour lockout show as “Locked”, with when the lockout ends.
- v1.0.305.0
- Endpoint self-updates now download through the same address stations already use for telemetry.
- v1.0.304.0
- The station list includes each station's Endpoint version, shown in the SupportFlow Client's Devices list.
- v1.0.303.0
- Renaming an Endpoint now finishes correctly even when the station's reply does not come back, and history moves to the new name.
- A station renamed on the machine itself keeps its history under the new name.
- v1.0.302.0
- Renaming an Endpoint now works on ControlKey-protected stations (with SupportFlow Client 1.4.19.0 or later).
- v1.0.301.0
- Paying for a different plan cancels your previous subscription and emails a “Service Plan Change” notice with a reference that matches your Audit Log.
- v1.0.300.0
- One-off purchases are matched to the right plan automatically.
- v1.0.299.0
- On My Plan, your current paid plan has a Cancel button; a confirmed cancel moves the account to the free plan.
- Accounts with no organization get their own Audit Log.
- If a cancel does not go through, a support ticket opens and you are given its number.
- v1.0.296.0
- Subscription payments now credit your service time automatically, never twice.
- v1.0.292.0
- Fixed the address the SupportFlow Client uses to fetch Endpoint updates.
- v1.0.288.0
- Endpoint updates pushed from the Server are confirmed on the station before they are reported as delivered.
- v1.0.285.0
- ControlKey chain of trust: every approved key records which trusted key approved it, and revoking a key also revokes the keys it approved.
- v1.0.278.0
- Payments credit service time automatically: renewing the same plan adds 32 days from the payment date, and a more expensive plan upgrades at once.
- Users and Managers can choose Leave Organization under My Account, keeping their account and their own stations.
- Account closures are recorded in the Audit Log.
- v1.0.270.0
- Paid service time counts down by calendar day, and free plans never expire.
- An organization whose paid time runs out falls back to free-plan limits until it renews.
- Plan limits on members and stations are enforced; a station over the limit waits in Unassigned and keeps reporting, and telemetry is never refused.
- When an organization is full, the invitation page gives the real reason.
- v1.0.268.0
- Service plans (Free, Basic, Pro, Fleet 100) are managed on the Server, so plan changes appear without a new release.
- v1.0.265.0
- File uploads and downloads requested by an AI assistant are signed by your SupportFlow Client, so ControlKey-protected stations accept them.
- v1.0.264.0
- The Support Viewer's file manager and clipboard work on ControlKey-protected stations: your own SupportFlow Client signs each action, with your consent.
- v1.0.262.0
- Three organization roles: Organization Administrator (the owner), Manager and User, each with clear permissions.
- Organization codes: a short code beside an organization's name, so you can confirm you are joining the right one.
- Removing a member also revokes their ControlKeys.
- v1.0.258.0
- The Support Portal focuses on viewing a station's screen and transferring files.
- The portal's station list shows the stations assigned to you.
- v1.0.246.0
- Retired tools specific to a single kiosk application, so every deployment gets a clean tool list.
- v1.0.244.0
- The product is now SupportFlow, and the Server answers on both its new and its old addresses during the move.
- v1.0.152.0
- If a database component is missing, the service still starts and says exactly what is missing.
- v1.0.139.0
- Fleet views keep working even if a station has a damaged date record.
- v1.0.73.0
- History clean-up runs in small separate steps instead of alongside every telemetry write.
SupportFlow / KnowledgeFlow Client Windows
The app on your PC that connects your AI assistant to your stations, and signs every command with your ControlKey.
- v1.5.46Latest
- A station's menu has one way in: Remote in. It opens the viewer you choose under Options > My Organization > Viewer Type - the Native Viewer (the Sealed Viewer, renamed), where it starts, or the MiniViewer (Webbased) in your web browser. A double click on a station does the same.
- The Native Viewer opens any station you may view, in Medium or High Security. Your typing is sealed end to end to a station that supports it; elsewhere it is encrypted on each link, and the padlock window says which.
- The Native Viewer's Actions menu is at the far left of its bar.
- In the Native Viewer, pointing at something moves the station's pointer there too, so menus that open when you point at them, and tooltips, appear (KQS Endpoint 1.0.259 or later).
- The Native Viewer's File Transfer window has My Computer on the left and the station on the right, with arrows between them to send and fetch the files you select. Files can be dragged from one side to the other, and dropped on the station's side from Explorer. My Computer starts on your Desktop, and after that where you left it for that station.
- Each side of the File Transfer window has a drop-down of places - My Computer (the drives), Desktop, My Documents and Downloads - and your Favorites; the star beside it adds the folder open there to Favorites. On the station's side the places need KQS Endpoint 1.0.259 or later, and its Desktop, My Documents and Downloads are those of the person signed in there.
- In the Native Viewer, dragging a window by its title bar moves an outline of it under your pointer straight away, and the window itself moves once, when you let go - quick even over a slow connection (KQS Endpoint 1.0.259 or later). Esc before letting go leaves it where it was.
- The Native Viewer's messages appear on its bar, beside the padlock, so the picture no longer shifts down when one appears.
- The Native Viewer shows any of a station's monitors: a button beside Actions shows the number of the monitor on screen - 1 is the main one. With two monitors a click shows the other; with more, it lists them with their sizes. A station with one monitor has no button (KQS Endpoint 1.0.259 or later).
- v1.5.45
- The Sealed Viewer's picture now updates as quickly as the Support Viewer's, and the window starts faster.
- A green padlock beside Connected. Click it for a diagram of what protects each part of the connection, and the methods used.
- The Sealed Viewer has an Actions menu: File Transfer, Paste to remote, Copy from remote, Quality, View Size, Task Manager, Ctrl+Alt+Del, Reboot and Disconnect. Its files and clipboard text are sealed end to end.
- In the Sealed Viewer, a double click, a drag and the mouse wheel now work as they do on the station.
- v1.5.44
- Medium Security now protects station commands exactly as High Security does: a command travels only inside its signed, encrypted envelope, the station's answer comes back sealed so only this PC can read it, and the Client remembers each station's key and tells you if it ever changes. Medium and High now differ only in where your ControlKey comes from: your ControlKey password, or a random key kept on this PC.
- The Sealed Viewer works in Medium Security too.
- The first time it connects after this update, the Client remembers the key of each of your stations; a station that is reinstalled later is listed under Pending Station Authorizations as KEY CHANGED, so you can compare its fingerprint before trusting it.
- v1.5.43
- The Stations window offers Sealed Viewer on the right-click menu of a station that supports it: a window showing the station's screen in which everything you type is encrypted for that station alone, so nothing in between, our server included, can read it. That makes it the safe way to type a password at the station's sign-in screen. It needs High Security mode and a ControlKey on this PC.
- The Client signs the remote viewer's new Ctrl+Alt+Del for you, the same as its other station actions.
- v1.5.42
- The SupportFlow Stations window's File menu shows the address you are signed in with, just above Sign out. Click it for the new Profile window: your account's status, your role, your organization, how many stations you can reach and how many of them are online now, your service plan and when the account was made.
- v1.5.41
- In the SupportFlow Stations window, right-click your organization's name for Download Endpoint installer - it saves the installer named for your organization - and, for the Organization Administrator, Rename. An organization can be renamed once every 30 days; the window says so before you type, and when the next change is available.
- Rename on a station's right-click menu gives it a new name, for your organization's Administrator and Managers, while the station is online. Its history, notes and screenshots move with it.
- The Endpoint installer the Client saves is the file exactly as published, named setupEndpoint_ and your organization's code.
- v1.5.40
- The KQS Endpoint installer the Client hands out is now Endpoint 1.0.257, so a station you install from it shows the small white K while someone is viewing its screen.
- v1.5.39
- The Stations window has a Help menu: Online Documentation opens this help site, Support Contact opens your support requests in the portal, Check for updates opens a window of its own, and About is there too, last. About has left the File menu.
- Check for updates: the version you have and the one available side by side, Download and install with a progress bar and the megabytes so far, and the installer started right there. What's new opens this changelog at the SupportFlow Client.
- About is a window of its own, with room to read: the version as a badge, and the website, documentation, support email, Support Contact and what's new each on a line. The tray's About opens it too.
Show 48 earlier releases
- v1.5.38
- In the Stations window, double-click a station to open it in the remote viewer - the same as Access now on its right-click menu. When it cannot be opened yet (offline, or not authorized), the window says why.
- v1.5.37
- The SupportFlow Stations window has an MCP menu beside File. Install / Reinstall Claude MCP and Install / Reinstall ChatGPT connect Claude Code and Claude Desktop, or ChatGPT / Codex, to the Client exactly as the Install buttons under Options > AI Connectors do.
- MCP Info on the same menu shows the Client's own MCP server on this PC - its address and what to send with it, and the same as JSON - in a box you can copy from, for an AI tool that is not on that list. It says whether the Client is connected now, and that what it shows includes your account's MCP token.
- v1.5.36
- Share access offers Limited Share or Unrestricted Share in one drop-down, with a sentence under it that follows your choice.
- On a station shared with you without restrictions, Share access lists the keys on the station and whose each is, and lets you take keys off it - the keys of the organization it belongs to included - after a red confirmation. Select all of the organization's keys takes them off together.
- On a station shared with you without restrictions, a ControlKey your own organization has revoked is taken off it too.
- Clicking the Client's icon beside the clock opens the SupportFlow Stations window while you are signed in, and the sign-in window when you are not (on a new install, say).
- The Stations window has a box above the list: type all or part of a station's name and only the stations whose name has it are shown. It clears itself a minute after you last typed, or at once with its small X or Esc.
- Under the list, a panel shows whether the Client is connected - a green dot, a red one while it is not, amber while it connects - and Connect / Disconnect is the first item on the File menu. Sign out now disconnects and opens the sign-in window.
- Right-click a station for Edit tag... to change the words shown after its name, and for Properties: a window of its own with the station's latest screenshot beside its details - system, processor, memory, mainboard, disks, display, network and more - and its tag, description and notes to change. Both say plainly who else reads what you write there, in amber when another organization does. These need the server to be up to date.
- Screenshot previews in the Stations window show for every station you rest the pointer on, one after another, and no longer take the focus from the window.
- The Portal viewer allowed notice is smaller: the station's name, (expand for details), Deny and OK. It hides itself after ten seconds, and waits while you point at it, click it or read its details.
- Deny on that notice ends the viewer at once: the Client signs nothing more for it, the viewer window says it was denied, and the station's access for it ends. Each Deny goes in the Audit Logs while they are on.
- v1.5.35
- In the SupportFlow Stations window, each station's tag follows its name in light grey, cut to fit the window, and the window no longer shows tooltips over its stations.
- New on the SupportFlow Stations window's File menu: Show screenshot previews - rest the pointer on a station for a second to see its latest screenshot, small. The Client remembers the choice.
- The Audit Logs page under Options has a tick at the top to turn the Client's own audit log on or off. It starts off.
- Paste to remote and Copy from remote in the remote viewer are recorded in Options > Audit Logs while it is on - how many characters were pasted, never the text itself.
- Share access offers Limited (the default - what sharing has always been) or Unrestricted, each explained in one sentence. Unrestricted shows a red confirmation and asks you to type the other account's email address before anything is signed.
- The Share access list shows each share's kind. Right-click an approved limited share to make it unrestricted. An approved unrestricted share cannot be revoked, and the menu says why; if it was shared with you, you can still give it up yourself.
- New on the SupportFlow Stations window's File menu: Shared Stations… - every station your organization has shared, who it is shared with, the kind of share, whether it is offered or accepted, when, and by whom. Right-click a row to revoke it or make it unrestricted where that can be done.
- In the SupportFlow Stations window, a station shared with you without restrictions has a real Decommission (for everyone, after a warning) and its own Give up my access item. A limited share's menu is unchanged.
- v1.5.34
- Task Manager and Reboot from the remote viewer follow your Portal miniviewer requests setting, like the viewer's other actions.
- Task Manager and Reboot from the remote viewer are recorded in Options > Audit Logs.
- Each remote viewer is authorized on its own, so several can be open at once, and disconnecting one ends only that one's authorization.
- A remote viewer's authorization now lasts a minute at a time, renewed while the viewer is open.
- The SupportFlow Client's own update now shows how far its download has got, and the window stays responsive while it downloads (it used to sit at the start until the whole installer had arrived).
- In the SupportFlow Stations window, tooltips appear after the pointer rests on a row for 5 seconds.
- v1.5.33
- In Medium Security, the SupportFlow Client now moves files to and from your stations itself, as it already did in High Security.
- New Audit Logs page under Options: every file write the Client signed for a station, with the date and time. Clear asks first, and does not clear your organization's Audit Log in the portal.
- A Stations window: Show Stations on the tray icon's menu lists your stations by organization and group, online or offline, and a right-click on a station offers Access now, Share access, Create group, Move to group and Decommission.
- v1.5.32
- Signs the Support Viewer's File Transfer for files of up to 2 GB.
- v1.5.31
- In High Security, files of up to 2 GB to and from stations running KQS Endpoint 1.0.249 or later; a file larger than a station can take is refused before anything is sent.
- The installer includes Endpoint 1.0.249.
- v1.5.30
- Share access is simpler: a station not shared with anybody yet asks only for the email address to share it with. Revoke access is on the right-click menu of each account, and removing your own access asks first, with a clear warning.
- v1.5.29
- A Welcome window for a new organization's Administrator, the first time they sign in: it explains the Low, Medium and High Security modes and offers to switch to Medium Security Mode, or says where Low Security Mode works instead.
- v1.5.28
- Devices: right-click a station, Share access - share it with another SupportFlow account, see who it is shared with, and stop sharing.
- A station shared with you is shown as "Shared with you" in Pending Station Authorizations.
- A command for a station you name by its ID alone is signed for that station, so it is carried out instead of refused.
- The installer includes Endpoint 1.0.247.
- The Claude Desktop extension matches SupportFlow Client 1.5.28.
- v1.5.27
- Two of your stations that share a name (shown as NAME (1), NAME (2)) each get their own commands, signed for that station, and each keeps its own key - neither is shown as KEY CHANGED because of the other.
- The popup for a new station waiting to be approved shows your organization's icon at its top left, or ours when your organization has not set one.
- The Claude Desktop extension matches SupportFlow Client 1.5.27.
- v1.5.26
- In Medium Security, the Rotate button on the ControlKey page is now Change my ControlKey: a new ControlKey password, and with it a new key, for all your stations. In High Security it rotates your key as before.
- The ControlKey page lays out its buttons and text correctly from the moment it opens.
- The Claude Desktop extension matches SupportFlow Client 1.5.26.
- v1.5.25
- In High Security, the commands your assistant sends a station, the station's answers and the files you copy now travel sealed end to end: only the station and your PC can read them, and an answer altered on the way is not shown. Needs Endpoint 1.0.243 or later on the station.
- In High Security, copying files to and from a station, and reading its configuration file, are done by the SupportFlow Client itself - there is no script to run.
- The Client remembers each station's key and tells you if a station is reported with a different one; it is listed as KEY CHANGED under Pending Station Authorizations until you check it.
- A new station waiting for you now pops up by the Client's icon near the clock, with Approve, Decline and Defer 30 mins; clicking the icon while stations wait opens Pending Station Authorizations, which shows each station's Status - a green check when accepted, a red cross when denied - and tries a slow station once more by itself.
- Devices shows a station that is past your plan's station limit greyed and marked Inaccessible, and leaves it out of Update All.
- The Claude Desktop extension matches SupportFlow Client 1.5.25.
- v1.5.24
- New: Change my ControlKey. With Medium Security, a button on the ControlKey page (Options, then ControlKey) changes your ControlKey password. A progress window puts your new key on each of your stations, one at a time, and re-signs the keys you have authorized - please let it run until it is complete. Your other PCs ask for the new password at their next sign-in.
- Choosing your account password as your ControlKey password now gives a warning you can accept, instead of being refused, so a ControlKey made with that password can be set up again. We still recommend a different password.
- v1.5.23
- Reading a station's configuration file is signed by your ControlKey like any other station command, and takes one step when the file is already known.
- v1.5.22
- In an organization in Low Security Mode, setting up your ControlKey switches the organization to Medium or High Security - the Client explains this and asks you first.
- If this PC already holds a ControlKey, the Client offers the switch when you sign in.
- The first ControlKey window no longer asks for the password of a key SupportFlow holds for you.
- v1.5.21
- My Organization has a Change Password link: enter a new password twice and it is changed on the server at once.
- Your account's own private group is no longer listed by name; with no organization chosen, the Client says so.
- The ControlKey page describes the ControlKey password mode in plain words and shows the key below it.
- After switching to a different account, installing the AI connection now uses the new account's sign-in.
- v1.5.20
- One more backup server to try, in order, when the main servers do not answer.
- v1.5.19
- Works with the KQS SupportFlow plugin for Claude: the plugin starts the Client by itself and uses the sign-in you made in the Client, with no token to copy.
- The installer adds the Client to your PATH, so tools that start it by name can find it.
- Version numbers now have three parts: this is 1.5.19.
- v1.5.18.0
- Install MCP notices when an AI assistant already has the SupportFlow tools - for example from a Claude Code plugin, or from another entry pointing at this Client - and asks before adding a second copy, so your assistant never sees every tool twice.
- Claude Code set up with CLAUDE_CONFIG_DIR, or with its older settings layout, is now registered in the file it actually reads.
- v1.5.17.0
- Tells the server whether your ControlKey is a ControlKey password (Medium Security) or a Full ControlKey (High Security), so SupportFlow Lite can let Medium Security accounts sign in with the same ControlKey password.
- v1.5.16.0
- When the Client cannot connect, it now checks whether your network is blocking it, and says what to ask your IT team to allow.
- v1.5.15.0
- Saving the Endpoint installer takes one click less: your managers' keys are added to it automatically, as they are in the portal's download, and the saved message lists them.
- v1.5.14.0
- Download KQS Endpoint installer now asks you to sign in once on this PC first, so every installer is made for your organization; after that the Client remembers your organization, even before you connect.
- v1.5.13.0
- A cleaner ControlKey page in Options: your ControlKey mode (High Security or Medium Security) shown along the top, and three large panels - Change ControlKey Mode, Manage ControlKeys, and Pending Station Authorizations.
- Switching between High and Medium Security is now one guided process: a warning first, then a progress window that puts your new key on every station, re-signs every key you have authorized, and retires your old key.
- A switch can be stopped and continued later; stations that were offline are brought over automatically when they come back.
- Your other PCs that used the same ControlKey offer to set themselves up with the new one at their next sign-in.
- “Save ControlKey on this PC” has moved to Change ControlKey Mode.
- v1.5.12.0
- Supports the clearer AI tool names (list_stations, rename_endpoint, update_station_endpoint, server_status); the original names keep working.
- Renaming an Endpoint or updating a station under the new names works on ControlKey-protected stations; this version is required for that.
- Station lists from every server are merged under the new names, and routine status checks no longer spin the tray icon.
- v1.5.11.0
- New first-run ControlKey window: right after your first sign-in on a PC, you set up your ControlKey by choosing a ControlKey password, typed twice.
- On any further PC you enter the same ControlKey password, so there is nothing to copy between machines.
- Optional “Save ControlKey on this PC” means you are not asked for the password after every sign-in; you can change this later in Options.
- Advanced Options offers Medium Security (a ControlKey password), High Security (Full ControlKeys, saved to a backup file) or importing Full ControlKeys from a file.
- A “Security recommendations” link explains what the ControlKey is and how to keep it safe.
- The Client now needs a ControlKey to stay connected, so cancelling setup disconnects.
- v1.5.10.0
- A new “No login? Sign-up here.” link under the Connect button takes people without an account straight to sign-up.
- Includes Endpoint 1.0.241.0.
- v1.5.9.0
- Adds a second backup server, tried automatically when the primary server does not answer at sign-in.
- Includes Endpoint 1.0.240.0, whose installer no longer leaves files behind in your downloads folder.
- v1.5.8.0
- The Client now connects to the new primary SupportFlow server, the same one the Endpoints use.
- If the primary server does not answer at sign-in, the Client signs in through a backup automatically; a wrong password is never retried elsewhere.
- Updating moves the Client to the new server with no settings to change.
- v1.5.7.0
- Bundles Endpoint 1.0.238.0, so Endpoint installers saved from the Client use the new primary server first.
- v1.5.6.0
- File transfers in the portal's Support Viewer (listing, downloading and uploading) now work on ControlKey-protected stations without extra prompts while the viewer is authorized.
- Includes Endpoint 1.0.237.0.
- v1.5.5.0
- New Medium Security mode: your ControlKey can come from a separate password, so any of your PCs can be set up with that same password (Options › ControlKey security).
- Back up a High Security ControlKey to a passphrase-protected file and import it on a new PC.
- The Recovery Key is registered and delivered to your stations and can restore a replacement PC; a lost PC's key can be retired in favour of the new PC's without losing what it approved.
- Endpoint installers saved from the Client can be limited to the manager keys you choose, so new stations accept their first authorization only from those keys.
- The Client alerts you if a station trusts a ControlKey that nobody in your organization holds.
- Security hardening of ControlKey approvals, key carrying and Support Viewer authorization.
- v1.5.4.0
- New “Portal miniviewer requests” setting on My Organization: Always Allow, Ask (the default) or Always Deny when the portal's Support Viewer asks the Client to authorize an action.
- Every automatic allow or deny is announced in a corner notice, with a “Change…” button.
- Signing out of or exiting the Client ends every portal viewer authorization it granted.
- v1.5.3.0
- The Update button now hands over to the installer cleanly: the installer starts at once and the Client exits completely.
- Copies of the Client started by AI assistants are closed during an update so the files can be replaced; the assistant reconnects when restarted.
- The new version starts noticeably sooner after an update.
- v1.5.2.0
- My Organization loads as soon as you connect, so it is already filled in when you open Options.
- Includes Endpoint 1.0.236.0.
- v1.5.1.0
- New My Organization page behind the gear: your organization, your plan among those on offer, station and member counts, the website and the support-ticket page.
- Multi-server support: the Client signs in to every SupportFlow server and sends each station's commands to the server that station reports to; station lists are merged into one.
- If the primary server is down at start-up, the Client signs in through another, and account changes are clearly declined until the primary returns.
- Sleeping stations show in the Devices list with an indigo light, and the Client tells you when your sign-in wakes them.
- Includes Endpoint 1.0.235.0.
- v1.4.23.0
- Redesigned main window with just two tabs, Login and About; Devices, ControlKey and AI Connectors moved to a window opened from the gear button.
- Update All: one window downloads the Endpoint build, shows the fingerprint worked out on your PC, and updates every answering station once you confirm; right-click a station to update just that one.
- The Devices list shows a coloured status light and each station's Endpoint version, and says “Station” instead of “Kiosk”.
- Pending authorizations keeps itself up to date, flashes when a new station starts waiting, and lists locked stations greyed out with when the lock ends.
- Newly installed stations appear in Pending authorizations within about 20 seconds.
- Exit always ends the Client completely, and the installer closes running copies so updates can finish.
- With “Start with Windows” on, a failed automatic connection is retried until it succeeds.
- Renaming an Endpoint works on ControlKey-protected stations, and stations whose clocks are up to 15 minutes off can be accepted.
- v1.4.6.0
- A spinner on the tray icon shows when real work is passing between your AI assistant and your stations; routine background checks do not spin it.
- A first-run window offers to add the kqs-support connection to the AI assistants it finds (Claude Code, Claude Desktop, ChatGPT/Codex).
- When your account already has a ControlKey on another PC, the Client asks before creating a second one, and the PC holding the key is asked to approve it.
- Approval requests show the requesting PC's name and an optional note from the person asking.
- v1.4.3.0
- The portal's Support Viewer can use the file manager and clipboard on ControlKey-protected stations, with the Client authorizing each action after asking you.
- File uploads and downloads to ControlKey-protected stations work from your AI assistant, each transfer signed by the Client.
- Your ControlKey is created automatically at first sign-in.
- A corner notice and a blinking tray icon tell you when stations are waiting to be authorized.
- Bundles the new orange-branded Endpoint with a clearer setup dialog (Station Name, Organization Name).
- v1.3.3.0
- Your organization's code is shown beside every organization name, so you can confirm you are in the right organization.
- Your role in the organization appears in the tooltip.
- v1.3.2.0
- The Client re-registers its ControlKey automatically after a reconnect if the server has not recorded it yet.
- v1.3.1.0
- Pending authorizations shows each waiting station's clock difference.
- v1.3.0.0
- Introduces ControlKey: each PC creates its own key, and commands to ControlKey-protected stations are signed with it automatically.
- New ControlKey tab, and a Pending station authorizations window to accept or deny newly installed stations.
- Managers see their organization's keys with Approve and Revoke, delivered to online stations automatically.
- Rotate your own key: a successor is created, delivered to your stations, then made live.
- Endpoint updates to protected stations are signed only for builds you have checked on this PC.
- v1.2.0.0
- The application is now KQS_SupportFlow, and the AI assistant connection is named kqs-support; old entries are removed automatically.
- Reworked Login page, a proper grid for the Devices list, and a “Download KQS Endpoint installer” link.
- v1.1.0.0
- Rebranded as SupportFlow by Koquelani Systems Limited, with a new look.
- The About tab shows the company website and support contact.
- New Options page with Start with Windows and a Show Log button.
- v1.0.0.0
- First release: sign in with your username and password, and your AI assistant gets an encrypted connection to your stations through the SupportFlow server.
- One-click setup for Claude Code and Claude Desktop, plus a configuration snippet with a Copy button.
- Runs from the system tray, can save your password and connect automatically at start-up.
- A per-user installer that needs no separate .NET install, including the Endpoint and a button to save its installer.
Endpoint Stations
The small agent on each station: it reports how the machine is doing and carries out the commands you sign.
- v1.0.258Latest
- The setup screen reads installers named setupEndpoint_ followed by your organization's code: it asks our server which organization that is, fills it in, and learns your organization's managers' keys there. Installers named the older way keep working.
- An installer named with a code that names no organization offers to install the station as Unassigned, and one that cannot reach our server to look the code up installs nothing and says so.
- v1.0.257
- While someone is viewing the station's screen remotely, a small white K now shows near the bottom-right corner of that screen, and it goes away when they stop. It cannot be clicked and never takes the focus, so it does not get in the way of anything under it.
- v1.0.256
- The Endpoint measures how long a request to each of our servers takes, once a minute - the server it reports to as well as the others - and includes each one's round trip in its regular report: the middle of its last three answers, so one slow answer does not swing it.
- v1.0.255
- The Endpoint no longer reports five fields left over from the kiosk software this system started with: two programs' running states, the hub server's connection failures today (two counts) and a count of unsynced records. Nothing used them, so each report is a little smaller.
- v1.0.254
- When the Windows account it runs as is an administrator, the Endpoint now uses that account's full administrator rights on every station, so the commands you send it can also manage services, system settings and programs that need them. It takes them only where Windows grants them without asking, and never shows a prompt.
- While it takes those rights, the copy already running keeps going until the new one is ready to take over, so the station is never left without its Endpoint.
- The Endpoint's log now says so when Windows Task Scheduler is switched off on a station, which stops the Endpoint starting itself again if it is closed.
- v1.0.253
- On a station shared without restrictions, the account it was shared with can take any ControlKey off it except another unrestricted share's - the station's own organization's keys included - and withdraw offers still waiting there. An unrestricted share's key is still removed only by itself, or by Reset Authorization at the station.
- A remote rekey is refused straight away while an unrestricted share's key is on the station, instead of being scheduled and then dropped.
- v1.0.252
- In the remote viewer's Med and High settings, photographs and pictures on the screen are sent as JPEG and everything else exactly as before, so a busy screen takes about a quarter of the data in High and about a third less in Med. A viewer that can only show whole pictures gets one whole picture instead.
- Takes the remote viewer's new Low (Responsive) setting: Low's pictures, up to 20 a second.
- The remote viewer's Paste to remote and Copy from remote close their command window on the station as soon as they are done.
- Takes unrestricted shares: the shared key becomes a manager on the station that no other key can remove - only itself, or Reset Authorization at the station. A limited share's key can be made unrestricted, and never back.
- Each key remembers how it came to be trusted, so a key that arrived through a share can only manage the keys that came in through it - never the station's own organization's keys - and the organization's keys cannot remove an unrestricted share's.
- v1.0.251
- Takes a drag and the mouse wheel from the remote viewer, under the same signed permission as its clicks. A mouse button pressed from the viewer is always let go, even if the viewer goes away mid-drag.
- The remote viewer's Low, Med and High pictures (256 colours at half size, 256 colours, and 65,536 colours), sent as only the parts of the screen that changed, at whatever rate the connection carries. Nothing is captured for the viewer unless it is open and asking for pictures.
- Ends the remote viewer's access at once when it disconnects, and holds a viewer's authorization for a minute at most.
Show 27 earlier releases
- v1.0.250
- The Support Viewer works on a station only once the station has been authorized.
- v1.0.249
- Sends and receives files of up to 2 GB, and checks that the drive has room for a file before it starts writing it.
- v1.0.248
- Keeps the station's name and identity in the registry under HKEY_CURRENT_USER\SOFTWARE\KQS\Endpoint, as StationID and StationGUID, so your own software on the station can read them. A station moves its existing settings there by itself, unchanged.
- v1.0.247
- Keeps a one-time offer, signed by your organization, that lets another account's SupportFlow Client be approved on this station for 24 hours.
- v1.0.246
- Keeps its settings and everything it knows about itself in one file, endpoint_config.json, in place of several smaller ones. A station converts on its first start; the old files are set aside, not deleted.
- Recognises a station folder that was copied to another PC: the copy starts as a new station, to be authorized on its own, instead of as a second copy of the original.
- The status window has a checkbox for each watermark: the station's name floating on screen (on unless you turn it off) and its details on the desktop wallpaper (on for Windows Server, off on other PCs). Turning the wallpaper off puts back the wallpaper the PC had before.
- Both watermarks show the station's name as your organization shows it, with its number when two stations share a name, and are redrawn as soon as the station is renamed. The status window also shows the station's group.
- Setup checks that it can read and write in the folder you choose before installing anything. Run as administrator, it adjusts the folder's permissions when needed; otherwise it tells you the folder is not suitable.
- v1.0.244
- Reports whether the station's screen belongs to a Remote Desktop session, so Remote Access can tell you when clicks and typing cannot reach it.
- v1.0.243
- Seals its answers, and the files it sends and receives, for a SupportFlow Client in High Security, and checks every part of a file before writing it.
- The setup screen warns you before installing a station that may not be available until your organization increases its plan limits, and tells you plainly when a station cannot be added; the status window shows when a station is Inaccessible.
- v1.0.242
- A rekey requested remotely now waits five days, and the Endpoint's icon flashes until the person at the station answers: Rekey Now accepts it at once; Cancel and Disable Endpoint refuses it.
- A disabled Endpoint keeps reporting in, shown as Disabled, and accepts no remote command of any kind until somebody at the station re-enables it from its status window.
- Version numbers now have three parts.
- v1.0.241.0
- The Endpoint now sends the kiosk application's configuration only when it has changed, cutting a station's network traffic by up to about a third.
- The configuration is still re-sent every six hours, after a switch to another server, or whenever the Server lacks the current version.
- The check-in interval can be set centrally on the Server (default 10 seconds); a station with its own local setting keeps it.
- Fully compatible with older Servers, which keep receiving the full configuration.
- v1.0.240.0
- The installer no longer leaves settings or log files in the folder it was run from, such as Downloads; everything goes into the install folder.
- Setup's own log entries are added to the installed Endpoint's log, so the whole install history is in one place.
- If an installation cannot complete, an install log is saved beside the installer and the error message names it.
- v1.0.239.0
- Added support for an additional backup server; a backup that is not yet reachable is skipped at once, causing no delay.
- v1.0.238.0
- The Endpoint now uses a new primary server address that can move to other infrastructure without updating stations. The previous address stays as a fallback.
- v1.0.237.0
- Security hardening of station authorization and Support Viewer sessions.
- v1.0.236.0
- All Endpoint settings are now kept in a single settings file beside the program, replacing several separate files; existing settings carry over on first start.
- The settings file can be copied to set up another station without copying the station's identity.
- A settings file with a hand-editing mistake is never silently overwritten: the station keeps running on its previous settings.
- Fixed an issue where changing an option in the Endpoint window could erase other custom settings.
- Station authorization keys are kept in their own file, with additional security hardening.
- v1.0.235.0
- New Sleep Mode: a station of a long-inactive account checks in only about every 30 minutes and pauses live connections and routine uploads.
- A sleeping station wakes automatically as soon as someone from its account signs in.
- The station reports the check-in interval it is actually keeping, so Sleep Mode can be confirmed.
- v1.0.234.0
- Support for several servers working together: the Endpoint stays in touch with every configured server and reports which ones it can reach.
- Faster failover to the healthiest available server, and a return to the preferred server within a minute of it coming back.
- Stations move to another server automatically ahead of planned maintenance, avoiding gaps in reporting.
- The server list can be given when the Endpoint is installed.
- v1.0.233.0
- Reset Authorization in the Endpoint window now takes effect immediately, and can optionally block new authorizations for 48 hours (ended early only at the station).
- Reset Authorization and End Lockout can also be run from the command line, including by remote management tools.
- Authorization events (enrollments, removals, refusals and resets) are kept in the station's log, including which Windows account performed a reset.
- Support requests sent from the Endpoint window show the same ticket number used in the portal and in support emails.
- v1.0.232.0
- Remote Endpoint updates now download through the same connection the station already uses for reporting.
- Each downloaded update is checked against its expected fingerprint before it is installed.
- v1.0.231.0
- A newly installed station reports its authorization status from its very first check-in, so it appears in the SupportFlow Client's Pending Authorizations list within seconds.
- v1.0.230.0
- New diagnostic mode for stations that cannot connect: a read-only report on the machine and its connection to the Server, for your support team.
- The report covers the operating system and .NET version, secure-connection and proxy settings, clock accuracy, and a step-by-step connection test.
- It can run with or without a window, so remote management tools can run it too.
- v1.0.228.0
- File transfers to a station report success only once the file is confirmed on disk, making remote updates more dependable.
- v1.0.227.0
- Stations that may not set their own Windows clock now get the correct time from an internet time server, so authorized commands keep working when the local clock is off.
- The station reports its effective clock difference.
- v1.0.221.0
- Introduced ControlKey: the Endpoint carries out remote support commands only when they are signed by an operator key the station trusts.
- Stations report their authorization status to the Server and the SupportFlow Client.
- v1.0.206.0
- Ready for a move to a new server address: the Endpoint connects to the first server that answers, then moves to the preferred server on its own once it is online.
- Quicker start-up connection checks, so an unavailable server does not delay the station's first report.
- v1.0.156.0
- Large files, up to 512 MB, transfer to and from a station in chunks with progress reporting, and failures are reported back.
- v1.0.153.0
- Fixed the station's total application run time, which counted too high.
- v1.0.152.0
- The Endpoint now runs as a single standalone program, preventing start-up failures on machines where an add-on library could not load.