New: You create personal API tokens under API access in the user menu. Each token gets Read, Write or Delete, can be limited to certain parts of plnnrly, lasts at most 12 months, and can be rolled or revoked at any time. See API tokens.
New: The Manage API tokens permission decides who may create tokens.
New: An administrator can switch the REST API off under Settings › Administration › MCP & API. It was on by default.
New: An administrator can switch MCP off under Settings › Administration › MCP & API. It was on by default in this release; v2.7.2 changed that for new organisations.