Penpot 2.18 introduces Penpot Enterprise, our new paid plan, shipping alongside the most requested Outline stroke (stroke to path) and a fresh batch of features and fixes. Penpot stays free, unlimited, and open source. Enterprise is for organizations that need to govern people, workflows, or content.
WebGL rendering and MCP keep getting more reliable, with regrouped drawing tools, font previews, tokens that stay tokens when you copy, performance improvements, and plenty of quality-of-life polish. Community contributors shipped alongside the core team again. Thank you to everyone who filed, reviewed, and merged.
Let’s dive in!
Introducing Penpot Enterprise
As an open source product, Penpot brings the most advanced features to everyone for free. Penpot Enterprise is a paid layer that overrides, tweaks, or restricts how those features can be used at scale.
A dedicated Admin Console lets authorized users create independent organizations and apply rules to them. We are starting with something straightforward: per-organization SSO, and advanced permissions across every team. Penpot Enterprise is the plan that unlocks this.
One sign-in for everyone
Let the whole organization sign in through your corporate identity provider: a generic OpenID Connect provider, Azure Active Directory, or Google. One consistent way into your organization’s teams and files, governed by the directory you already run. From the Admin Console you can connect that identity provider in a few steps.
Advanced permissions
Decide who can do what across every team at once: who can create, edit, or administer teams, projects, and files, who can invite people in, and who can be invited (a typical use case is limiting invites only to people within your organization). Those rules sit on top of each person’s normal role, so the whole organization stays aligned with how you want to work, and changes take effect as soon as you make them.
Outline stroke: from line to shape
A path is the geometry: points and segments. A stroke is the visible line drawn along it (width, color, dashes, caps, joins). Until now that outline was a style sitting on the path, not a shape you could grab.
Outline stroke converts that outline into a separate, editable path, usually a closed shape that follows the visible edges of the stroke. Right-click a shape that has a stroke and choose Outline stroke. You can then reshape or restyle the outline on its own, run boolean operations, and export SVG where the outline is real vector geometry, not just a painted line. (#9961)
This one is available only with WebGL rendering turned on. One more reason to switch to WebGL rendering.
Drawing tools, regrouped
The workspace toolbar was running out of room. Drawing tools now sit in two flyouts: shapes (rectangle, ellipse, line, arrow) and free-draw (path, pencil). Hover a slot to pick a tool; the icon remembers the last one you used. (#9316)
This release also adds dedicated Line and Arrow tools (by @davidv399), so those staples are no longer a path-plus-caps workaround. (#9145)
Fonts you can actually see
A long-standing request lands: the font selector now previews font families, so you can scan the list and recognize a face before you commit. (#10403)
Tokens that stay tokens
Copy and paste used to resolve token references into raw values. Now token references are preserved when you copy and paste properties (by @AKnassa), so design-system links survive the trip. (#9582)
The color tokens picker is easier to scan as palettes grow:
• Token sets appear in reverse order by default (by @rhinocap). (#10552)
• Expanded and collapsed set state is remembered for the session. (#10551)
Dashboard and pages
Files on the dashboard can switch between grid and list views, so you can scan by thumbnail or by name. (#10691)
Pages in the workspace sitemap support multi-selection and bulk delete. Less clicking when you are cleaning house. (#10484, #10580)
MCP: simpler setup, steadier sessions
If you connect AI clients to Penpot, configuration is simpler for the common MCP clients. The key-generated modal no longer shows a misleading client JSON snippet (by @Shlok1729). (#10355, #10399)
Reliability work continues: MCP no longer hangs when the Penpot tab is backgrounded, and session timeouts and reconnects are more trustworthy after leaving a file or restarting the MCP container.
MCP Setup: Penpot MCP server.
Community contributions
Community bylines keep growing. Highlights from this cycle:
• Line and Arrow drawing tools (by @davidv399)
• Preserve token references on copy and paste (by @AKnassa)
• Highlight the first matching font in search (by @ai-mountain)
• Token sets reverse order in the color tokens picker (by @rhinocap)
• MCP client JSON snippet cleanup (by @Shlok1729)
• SVG option in image-fill file filters (by @LuBoys)
• Spacebar while typing a comment (by @Krishcode264)
• Custom fonts moving between teams, config.js cache for self-host flags, and comment avatars vs rulers (by @filipsajdak)
• MCP WebSocket proxy after container restart (by @780Farva)
• Numeric formulas, radial gradient handles, and several plugin and UI fixes (by @AKnassa)
Thank you to everyone credited in the changelog and to all who reported bugs.
Performance, fixes and polish
This cycle also includes a large set of bug fixes and performance work across WebGL rendering, tokens, variants, comments, plugins, export, and MCP. Patch releases since 2.17 folded in crash fixes, more dependable variant overrides, and MCP timeout reliability.
We will not list every line item here. See CHANGES.md for the full breakdown.
More to explore
If you need to govern people, workflows, or content, look at Penpot Enterprise. For everyone else, turn on WebGL rendering and try Outline stroke on a fat path, pick a font by preview, and copy a token-backed property to see the reference survive. If you use MCP, this is a good week to reconnect and send feedback.
