Deprecated and phasing out features

This article outlines features that are no longer supported in Rocket.Chat or are scheduled for removal in future updates (deprecated). It also serves as an early notice for workspace administrators to adjust and optimize their workspaces accordingly. Please note that this information is subject to change with future releases and may not include every deprecated feature.

Breaking changes in upcoming versions

Rocket.Chat v9.0.0

Removal of deprecated features

In Rocket.Chat 9.0.0 and later, LDAP, SAML, and Custom OAuth require a premium plan, and Atlassian Crowd and the Drupal, Facebook, GitHub Enterprise, LinkedIn, Meteor, X (formerly Twitter), WordPress, and Dolphin logins have been removed on all plans. Before updating, Community workspaces that use LDAP, SAML, or Custom OAuth must upgrade their plan or move users to an authentication method available in Community, and workspaces on any plan must move users who sign in with a removed login to another method. Otherwise, these users are unable to log in after the update.

• The Gravatar integration for Set Default Avatar in the Accounts settings, deprecated in version 8.9.0, has been removed in version 9.0.0. New users get an uploaded or OAuth avatar, or their initials. Avatars already stored from Gravatar are kept.

• The Allow Anonymous Write feature in the Accounts settings, deprecated in version 8.3.0, has been removed in version 9.0.0, together with the anonymous role. Existing anonymous users are deactivated on upgrade. Anonymous read is still available.

• The Babel transcompiler for integrations has been removed in version 9.0.0. Scripts are stored as-is and executed natively by isolated-vm (V8). For details, see Integrations.

• WebDAV integration removed: The WebDAV integration, its settings, the WebDAV accounts in user preferences, and WebDAV file storage have been removed. The upgrade stops if Storage Type is set to WebDAV: switch to GridFS, Amazon S3, Google Cloud Storage, or FileSystem and move your files before you update.

• Atlassian Crowd integration removed: The Atlassian Crowd settings, login, and user sync have been removed. Users provisioned through Crowd keep their accounts and must sign in another way, such as LDAP (Crowd exposes an LDAP interface) or a local password.

• OAuth login providers removed: The built-in Drupal, Facebook, GitHub Enterprise, LinkedIn, Meteor, X (formerly Twitter), WordPress, and Dolphin logins have been removed, and their settings are deleted on upgrade. Apple, GitHub, GitLab, Google, and Nextcloud remain. Providers that support standard OAuth2 can be set up again as Custom OAuth.

• Legacy OAuth flow removed: OAuth sign-in always uses the server-side flow. The Use Modern OAuth Flow setting and the OAuth Proxy Host and Proxy Services settings have been removed.

• LDAP, SAML, and Custom OAuth on Community: LDAP, SAML, and Custom OAuth require a license that includes the ldap-enterprise, saml-enterprise, or oauth-enterprise module. On workspaces without it, these sign-in options are turned off.

• Legacy push settings removed: The hidden Push_UseLegacy, Push_gcm_project_number, and Push_gcm_api_key settings have been removed. Android push notifications use the push gateway or the FCM credentials in Google API Credentials.

• Legacy federation settings removed: The settings of the legacy federation and the Matrix bridge, and the /federation slash command, have been removed. Use Federation instead.

• Unused settings removed: The hidden Troubleshoot_Disable_Statistics_Generator, Troubleshoot_Disable_Workspace_Sync, and FileUpload_S3_SignatureVersion settings have been removed.

• Use Rocket.Chat SDK setting removed: The Use Rocket.Chat SDK setting in the General settings has been removed. The web client always connects to the server through the SDK, so the setting no longer had any effect. It is deleted on upgrade.

• Meteor client packages removed from the web client: The web client no longer includes Meteor's client packages. Scripts that run in the web client, such as the scripts in Manage → Workspace → Settings → Layout → Custom scripts and integration scripts that inject JavaScript, can no longer use Meteor.userId(), Meteor.user(), Meteor.call(), Meteor.subscribe(), Meteor.loginWithToken(), Meteor.status(), Tracker, or client-side collections. The custom script events still fire on window. Scripts that need the current user can read Meteor.userId and Meteor.loginToken from localStorage (or from sessionStorage when Forget user session on window close is enabled) and call the REST API.

• ALLOW_UNSAFE_QUERY_AND_FIELDS_API_PARAMS removed: The environment variable and the query and fields API parameters it re-enabled have been removed. Endpoints that validate their parameters return 400 error-invalid-params when a request includes them.

• Legacy /ufs file path removed: Files and avatars are no longer served from the legacy /ufs path. Use the file URLs returned by the REST API.

• API endpoint replacements and removals: The following deprecated API methods and endpoints have been removed, with some being replaced by improved alternatives:

  Type	Name	Replacement	Deprecated since	Removed in version
  Method	autoTranslate.getProviderUiMetadata	Replaced by the /autotranslate.getProviderUiMetadata endpoint.	8.9.0	9.0.0
  Method	cloud:getWorkspaceRegisterData	Replaced by the /cloud.workspaceRegisterData endpoint.	8.9.0	9.0.0
  Method	getSetupWizardParameters	Replaced by the /setupWizard.parameters endpoint.	8.9.0	9.0.0
  Method	loadSurroundingMessages	Replaced by the aroundId parameter in the /rooms.history endpoint.	8.9.0	9.0.0
  Method	loadNextMessages	Replaced by the /rooms.history endpoint.	8.9.0	9.0.0
  Method	loadHistory	Replaced by the /rooms.history endpoint.	8.9.0	9.0.0
  Method	getMessages	Replaced by the /chat.getMessages endpoint	8.9.0	9.0.0
  Method	raix:push-setuser	No replacement.	8.9.0	9.0.0
  Method	getRoomJoinCode	No replacement.	8.9.0	9.0.0
  Method	checkFederationConfiguration	No replacement.	8.9.0	9.0.0
  Method	afterVerifyEmail	Replaced by the /users.verifyEmail endpoint.	8.7.0	9.0.0
  Method	cloud:connectWorkspace	Replaced by the /cloud.connectWorkspace endpoint.	8.7.0	9.0.0
  Method	authorization:addPermissionToRole	Replaced by the /permissions.addRole endpoint.	8.7.0	9.0.0
  Method	authorization:removeRoleFromPermission	Replaced by the /permissions.removeRole endpoint.	8.7.0	9.0.0
  Method	clearIntegrationHistory	Replaced by the /integrations.clearHistory endpoint.	8.7.0	9.0.0
  Method	replayOutgoingIntegration	Replaced by the /integrations.replayOutgoing endpoint	8.7.0	9.0.0
  Method	license:isEnterprise	Replaced by the /licenses.info endpoint.	8.6.0	9.0.0
  Method	license:getModules	Replaced by the /licenses.info endpoint.	8.6.0	9.0.0
  Method	banner/dismiss	Replaced by the /banners.dismiss endpoint.	8.6.0	9.0.0
  Method	slashCommand	Replaced by the /commands.run endpoint.	8.6.0	9.0.0
  Method	e2e.resetOwnE2EKey	Replaced by the /users.resetE2EKey endpoint.	8.6.0	9.0.0
  Method	deleteCustomSound	Replaced by the /custom-sounds.delete endpoint.	8.6.0	9.0.0
  Method	blockUser / unblockUser	Replaced by the /im.blockUser endpoint.	8.6.0	9.0.0
  Method	saveSettings	Replaced by the POST /settings endpoint.	8.6.0	9.0.0
  Method	e2e.requestSubscriptionKeys	Replaced by the /e2e.requestSubscriptionKeys endpoint.	8.6.0	9.0.0
  Method	autoTranslate.saveSettings	Replaced by the /autotranslate.saveSettings endpoint	8.6.0	9.0.0
  Method	cloud:checkRegisterStatus	Replaced by the /cloud.registrationStatus endpoint.	8.6.0	9.0.0
  Method	createDiscussion	Replaced by the /rooms.createDiscussion endpoint.	8.6.0	9.0.0
  Method	e2e.fetchMyKeys	Replaced by the /e2e.fetchMyKeys endpoint.	8.6.0	9.0.0
  Method	e2e.setUserPublicAndPrivateKeys	Replaced by the /e2e.setUserPublicAndPrivateKeys endpoint.	8.6.0	9.0.0
  Method	deleteEmojiCustom	Replaced by the /emoji-custom.delete endpoint.	8.6.0	9.0.0
  Method	insertOrUpdateEmoji	Replaced by the /emoji-custom.create and /emoji-custom.update endpoints.	8.6.0	9.0.0
  Method	uploadEmojiCustom	Replaced by the /emoji-custom.create endpoint.	8.6.0	9.0.0
  Method	downloadPublicImportFile	Replaced by the /downloadPublicImportFile endpoint.	8.6.0	9.0.0
  Method	getImportFileData	Replaced by the /getImportFileData endpoint.	8.6.0	9.0.0
  Method	getImportProgress	Replaced by the /getImportProgress endpoint.	8.6.0	9.0.0
  Method	getLatestImportOperations	Replaced by the /getLatestImportOperations endpoint.	8.6.0	9.0.0
  Method	startImport	Replaced by the /startImport endpoint.	8.6.0	9.0.0
  Method	uploadImportFile	Replaced by the /uploadImportFileendpoint.	8.6.0	9.0.0
  Method	addIncomingIntegration	Replaced by the /integrations.create endpoint.	8.6.0	9.0.0
  Method	deleteIncomingIntegration	Replaced by the /integrations.remove endpoint.	8.6.0	9.0.0
  Method	updateIncomingIntegration	Replaced by the /integrations.update endpoint.	8.6.0	9.0.0
  Method	addOutgoingIntegration	Replaced by the /integrations.create endpoint.	8.6.0	9.0.0
  Method	deleteOutgoingIntegration	Replaced by the /integrations.remove endpoint.	8.6.0	9.0.0
  Method	updateOutgoingIntegration	Replaced by the /integrations.update endpoint.	8.6.0	9.0.0
  Method	addUsersToRoom	Replaced by the /channels.invite and /groups.invite endpoints.	8.6.0	9.0.0
  Method	archiveRoom	Replaced by the /channels.archive endpoint.	8.6.0	9.0.0
  Method	createChannel	Replaced by the /channels.create endpoint.	8.6.0	9.0.0
  Method	deleteUserOwnAccount	Replaced by the /users.deleteOwnAccount endpoint.	8.6.0	9.0.0
  Method	getChannelHistory	Replaced by the /channels.history endpoint.	8.6.0	9.0.0
  Method	getUsernameSuggestion	Replaced by the /users.getUsernameSuggestion endpoint.	8.6.0	9.0.0
  Method	saveSetting	Replaced by the /settings/:_id endpoint.	8.6.0	9.0.0
  Method	setEmail	Replaced by the /users.updateOwnBasicInfo endpoint.	8.6.0	9.0.0
  Method	setRealName	Replaced by the /users.updateOwnBasicInfo endpoint.	8.6.0	9.0.0
  Method	unarchiveRoom	Replaced by the /channels.unarchive endpoint.	8.6.0	9.0.0
  Method	sendMessageLivechat	Replaced by the /livechat/message endpoint.	8.6.0	9.0.0
  Method	getUserMentionsByChannel	Replaced by the /channels.getAllUserMentionsByChannel endpoint.	8.6.0	9.0.0
  Method	unreadMessages	Replaced by the /subscriptions.unread endpoint.	8.6.0	9.0.0
  Method	pinMessage	Replaced by the /chat.pinMessage endpoint	8.6.0	9.0.0
  Method	unpinMessage	Replaced by the /chat.unPinMessage endpoint	8.6.0	9.0.0
  Method	deleteOAuthApp	Replaced by the /oauth-apps.delete endpoint.	8.6.0	9.0.0
  Method	updateOAuthApp	Replaced by the /oauth-apps.update endpoint.	8.6.0	9.0.0
  Method	saveNotificationSettings	Replaced by the /rooms.saveNotification endpoint.	8.6.0	9.0.0
  Method	raix:push-update	Replaced by the /push.token endpoint.	8.6.0	9.0.0
  Method	getStatistics	Replaced by the /statistics endpoint.	8.6.0	9.0.0
  Method	followMessage	Replaced by the /chat.followMessage endpoint.	8.6.0	9.0.0
  Method	getThreadsList	Replaced by the /chat.getThreadsList endpoint.	8.6.0	9.0.0
  Method	unfollowMessage	Replaced by the /chat.unfollowMessage endpoint	8.6.0	9.0.0
  Method	deleteCustomUserStatus	Replaced by the /custom-user-status.delete endpoint.	8.6.0	9.0.0
  Method	getUserStatusText	Replaced by the /users.presence endpoint.	8.6.0	9.0.0
  Method	insertOrUpdateUserStatus	Replaced by the /custom-user-status.create and /custom-user-status.update endpoints.	8.6.0	9.0.0
  Method	license:hasLicense	Replaced by the /licenses.info endpoint.	8.6.0	9.0.0
  Method	license:getTags	Replaced by the /licenses.info endpoint.	8.6.0	9.0.0
  Method	addAllUserToRoom	Replaced by the /channels.addAll and /groups.addAll endpoints.	8.6.0	9.0.0
  Method	addRoomLeader	Replaced by the /channels.addLeader and /groups.addLeader endpoints.	8.6.0	9.0.0
  Method	addRoomModerator	Replaced by the /channels.addModerator and /groups.addModerator endpoints.	8.6.0	9.0.0
  Method	addRoomOwner	Replaced by the /channels.addOwner and /groups.addOwner endpoints.	8.6.0	9.0.0
  Method	browseChannels	Replaced by the /directory endpoint.	8.6.0	9.0.0
  Method	channelsList	Replaced by the /channels.list endpoint.	8.6.0	9.0.0
  Method	deleteUser	Replaced by the /users.delete endpoint.	8.6.0	9.0.0
  Method	getRoomIdByNameOrId	Replaced by the /rooms.info endpoint.	8.6.0	9.0.0
  Method	getRoomNameById	Replaced by the /rooms.info endpoint.	8.6.0	9.0.0
  Method	getTotalChannels	Replaced by the /channels.list endpoint.	8.6.0	9.0.0
  Method	hideRoom	Replaced by the /rooms.hide endpoint.	8.6.0	9.0.0
  Method	ignoreUser	Replaced by the /chat.ignoreUser endpoint.	8.6.0	9.0.0
  Method	messageSearch	Replaced by the /chat.search endpoint	8.6.0	9.0.0
  Method	removeRoomLeader	Replaced by the /channels.removeLeader and /groups.removeLeader endpoints.	8.6.0	9.0.0
  Method	removeRoomModerator	Replaced by the /channels.removeModerator and /groups.removeModerator endpoints.	8.6.0	9.0.0
  Method	removeRoomOwner	Replaced by the /channels.removeOwner and /groups.removeOwner endpoints.	8.6.0	9.0.0
  Method	removeUserFromRoom	Replaced by the /channels.kick and /groups.kick endpoints.	8.6.0	9.0.0
  Method	resetAvatar	Replaced by the /users.resetAvatar endpoint.	8.6.0	9.0.0
  Method	saveUserPreferences	Replaced by the /users.setPreferences endpoint.	8.6.0	9.0.0
  Method	toggleFavorite	Replaced by the /rooms.favorite endpoint.	8.6.0	9.0.0
  Method	UserPresence:setDefaultStatus	Replaced by the /users.setStatus endpoint.	8.6.0	9.0.0
  Method	joinRoom	Replaced by the /rooms.join endpoint.	8.6.0	9.0.0
  Method	deleteFileMessage	Replaced by the /chat.delete endpoint.	8.6.0	9.0.0
  Method	userSetUtcOffset	Replaced by the /users.setPreferences endpoint.	8.6.0	9.0.0
  Method	spotlight	Replaced by the /spotlight endpoint.	8.6.0	9.0.0
  Method	listCustomSounds	Replaced by the /custom-sounds.list endpoint.	8.6.0	9.0.0
  Method	leaveRoom	Replaced by the /channels.leave, /groups.leave, /im.leave endpoints.	8.6.0	9.0.0
  Method	requestDataDownload	Replaced by the /users.requestDataDownload endpoint.	8.6.0	9.0.0
  Method	2fa:checkCodesRemaining	Replaced by the /users.totpCodesRemaining endpoint.	8.8.0	9.0.0
  Method	2fa:disable	Replaced by the /users.disableTotp endpoint.	8.8.0	9.0.0
  Method	2fa:enable	Replaced by the /users.enableTotp endpoint.	8.8.0	9.0.0
  Method	2fa:regenerateCodes	Replaced by the /users.regenerateTotpCodes endpoint.	8.8.0	9.0.0
  Method	2fa:validateTempToken	Replaced by the /users.validateTotp endpoint.	8.8.0	9.0.0
  Method	addOAuthService	Replaced by the /settings.addCustomOAuth endpoint.	8.8.0	9.0.0
  Method	addSamlService	No replacement.	-	9.0.0
  Method	addUserToRoom	Replaced by the /channels.invite and /groups.invite endpoints.	8.6.0	9.0.0
  Method	addWebdavAccount	No replacement.	-	9.0.0
  Method	addWebdavAccountByToken	No replacement.	-	9.0.0
  Method	auditGetAuditions	Replaced by the /audit.auditions endpoint.	8.8.0	9.0.0
  Method	auditGetMessages	Replaced by the /audit.messages endpoint.	8.8.0	9.0.0
  Method	auditGetOmnichannelMessages	Replaced by the /audit.omnichannelMessages endpoint.	8.8.0	9.0.0
  Method	autoTranslate.getSupportedLanguages	Replaced by the /autotranslate.getSupportedLanguages endpoint.	-	9.0.0
  Method	autoTranslate.translateMessage	Replaced by the /autotranslate.translateMessage endpoint.	-	9.0.0
  Method	botRequest	No replacement.	-	9.0.0
  Method	cleanRoomHistory	Replaced by the /rooms.cleanHistory endpoint.	-	9.0.0
  Method	cloud:checkUserLoggedIn	No replacement.	-	9.0.0
  Method	cloud:finishOAuthAuthorization	No replacement.	-	9.0.0
  Method	cloud:getOAuthAuthorizationUrl	No replacement.	-	9.0.0
  Method	cloud:logout	No replacement.	-	9.0.0
  Method	cloud:registerWorkspace	No replacement.	-	9.0.0
  Method	cloud:syncWorkspace	Replaced by the /cloud.syncWorkspace endpoint.	-	9.0.0
  Method	createDirectMessage	Replaced by the /im.create endpoint.	-	9.0.0
  Method	createPrivateGroup	Replaced by the /groups.create endpoint.	-	9.0.0
  Method	crowd_sync_users	No replacement.	-	9.0.0
  Method	crowd_test_connection	No replacement.	-	9.0.0
  Method	e2e.getUsersOfRoomWithoutKey	Replaced by the /e2e.getUsersOfRoomWithoutKey endpoint.	-	9.0.0
  Method	e2e.setRoomKeyID	Replaced by the /e2e.setRoomKeyID endpoint.	-	9.0.0
  Method	executeSlashCommandPreview	Replaced by the /commands.preview endpoint.	-	9.0.0
  Method	getFileFromWebdav	No replacement.	-	9.0.0
  Method	getReadReceipts	Replaced by the /chat.getMessageReadReceipts endpoint.	8.8.0	9.0.0
  Method	getRoomById	Replaced by the /rooms.info endpoint.	-	9.0.0
  Method	getS3FileUrl	No replacement.	-	9.0.0
  Method	getSingleMessage	Replaced by the /chat.getMessage endpoint.	-	9.0.0
  Method	getSlashCommandPreviews	Replaced by the /commands.preview endpoint.	-	9.0.0
  Method	getThreadMessages	Replaced by the /chat.getThreadMessages endpoint.	8.8.0	9.0.0
  Method	getUsersOfRoom	Replaced by the /channels.members and /groups.members endpoints.	-	9.0.0
  Method	getWebdavFileList	No replacement.	-	9.0.0
  Method	getWebdavFilePreview	No replacement.	-	9.0.0
  Method	insertOrUpdateSound	Replaced by the /custom-sounds.create and /custom-sounds.update endpoints.	8.5.0	9.0.0
  Method	joinDefaultChannels	No replacement.	-	9.0.0
  Method	listCustomUserStatus	Replaced by the /custom-user-status.list endpoint.	-	9.0.0
  Method	loadLocale	No replacement.	-	9.0.0
  Method	loadMissedMessages	Replaced by the /chat.syncMessages endpoint.	8.8.0	9.0.0
  Method	logoutCleanUp	Replaced by the /users.logout endpoint.	8.7.0	9.0.0
  Method	messages/get	No replacement.	-	9.0.0
  Method	OAuth.retrieveCredential	No replacement.	-	9.0.0
  Method	openRoom	No replacement.	-	9.0.0
  Method	personalAccessTokens:generateToken	Replaced by the /users.generatePersonalAccessToken endpoint.	-	9.0.0
  Method	personalAccessTokens:regenerateToken	Replaced by the /users.regeneratePersonalAccessToken endpoint.	-	9.0.0
  Method	personalAccessTokens:removeToken	Replaced by the /users.removePersonalAccessToken endpoint.	-	9.0.0
  Method	push_test	Replaced by the /push.test endpoint.	8.8.0	9.0.0
  Method	readMessages	Replaced by the /subscriptions.read endpoint.	-	9.0.0
  Method	readThreads	Replaced by the /chat.readThread endpoint.	8.8.0	9.0.0
  Method	refreshOAuthService	Replaced by the /settings.refreshOAuthServices endpoint.	8.8.0	9.0.0
  Method	registerUser	Replaced by the /users.register endpoint.	-	9.0.0
  Method	removeOAuthService	Replaced by the /settings.removeCustomOAuth endpoint.	8.8.0	9.0.0
  Method	rocketchatSearch.suggest	No replacement.	-	9.0.0
  Method	saveAudioNotificationValue	No replacement.	-	9.0.0
  Method	saveRoomSettings	Replaced by the /rooms.saveRoomSettings endpoint.	-	9.0.0
  Method	sendFileMessage	Replaced by the /rooms.media/:rid endpoint.	8.4.0	9.0.0
  Method	sendForgotPasswordEmail	Replaced by the /users.forgotPassword endpoint.	-	9.0.0
  Method	sendMessage	Replaced by the /chat.sendMessage endpoint.	8.8.0	9.0.0
  Method	setAvatarFromService	Replaced by the /users.setAvatar endpoint.	8.7.0	9.0.0
  Method	setUserActiveStatus	Replaced by the /users.setActiveStatus endpoint.	-	9.0.0
  Method	starMessage	Replaced by the /chat.starMessage endpoint.	8.0.0	9.0.0
  Method	updateMessage	Replaced by the /chat.update endpoint.	-	9.0.0
  Method	uploadCustomSound	Replaced by the /custom-sounds.create endpoint.	8.5.0	9.0.0
  Method	uploadFileToWebdav	No replacement.	-	9.0.0
  Endpoint	webdav.getMyAccounts	No replacement.	-	9.0.0
  Endpoint	webdav.removeWebdavAccount	No replacement.	-	9.0.0
  Endpoint	DELETE /canned-responses (ID in the request body)	Replaced by the DELETE /canned-responses/:_id endpoint.	8.0.0	9.0.0
  Endpoint	POST /login with an OAuth serviceName and accessToken	Signing in with a Google, Facebook, or Twitter access token has been removed. Use the OAuth sign-in flow and the /loginCode.redeem endpoint.	-	9.0.0

• API parameter replacements and removals: The following deprecated API parameters have been removed in 9.0.0 to mitigate security risks and improve performance.

  Type	Name	Parameter affected	Description	Deprecated since	Removed in version
  Endpoint	Create Integration and Update Integration	skipTranspile	Removed with the Babel transcompiler for integrations.	8.4.0	9.0.0
  Endpoint	All endpoints using this parameter	fields	Removed to avoid malicious queries.	5.0.0	9.0.0
  Endpoint	All endpoints using this parameter	query	Removed to avoid malicious queries.	5.0.0	9.0.0
  Endpoint	livechat/department.autocomplete and livechat/visitors.autocomplete	conditions in selector	Removed to avoid unsafe queries.	8.8.0	9.0.0
  Endpoint	users.info, users.create, and users.update	freeSwitchExtension	Renamed to sipExtension, also in user objects returned by the API.	-	9.0.0
  Endpoint	users.create, users.update, users.updateOwnBasicInfo, and users.info	phones	Replaced by the phones array ({ number, label? }), also in user objects returned by the API. Existing numbers are migrated on upgrade.	-	9.0.0
  Endpoint	push.token (POST)	token (response)	The response returns flat tokenType and tokenValue fields instead of the token object. Request bodies are unchanged.	-	9.0.0
  Endpoint	channels.online and groups.online	_id	The _id parameter is now required.	-	9.0.0

Rocket.Chat v8.0.0

Architectural and database updates

• ⚠️ We have officially discontinued support for MongoDB versions 5.0 and 6.0 to mitigate security risks as they have reached their official end-of-life (EOL). Workspaces running either version are required to upgrade to MongoDB 8.2 before moving to Rocket.Chat v8.0.0. It is important to back up your data before this upgrade to prevent unintentional data loss or potential service disruptions.

• The Streamhub service and the deprecated DISABLE_DB_WATCHERS environment variable have been removed as part of ongoing efforts to simplify the platform architecture and deployment model. Streamhub is no longer required for real-time communication in current workspace setups. You can safely remove the streamhub microservice and  DISABLE_DB_WATCHERS from your configuration.

Omnichannel and marketplace enhancements

• We have pruned unused SMS integrations, specifically eliminating the settings for Mobex and VoxTelesys. Twilio will remain the only supported integration available for configuring SMS gateways in your workspace.

• WebRTC-based Livechat calls and all associated features, including the Meet page, are outdated and have been removed. Workspaces that require synchronous communication in Omnichannel can integrate video conferencing solutions through Apps-Engine or the Rocket.Chat APIs.

• The outdated Game Center feature has been removed to reduce clutter, as games are no longer available on the marketplace.

Security and administration changes

• Tokenpass OAuth integration is no longer available on the workspace. If your workspace still relies on Tokenpass for user authentication, update your configurations to use a supported alternative OAuth or SAML provider to avoid potential authentication issues and locking users out.

• Enable second layer encryption for data transport setting is discontinued and no longer available.

• The Logs tab in Reports has been removed. Log View Limit settings and log streaming features, including stdout streaming, related APIs, permissions, and runtime log queues are now cleared from the codebase. This change addresses the security and reliability limitations of the built-in app log view, especially in multi-instance and microservices production setups. Workspace logging is now handled exclusively at the infrastructure level. Visit Monitor Workspace Logs and Metrics for more details.

• The previously deprecated /v1/users.createToken endpoint has been undeprecated and is no longer scheduled for removal. It now enforces additional security requirements where administrators must configure the CREATE_TOKENS_FOR_USERS_SECRET environment variable and include this shared secret in all requests to restrict token generation to authorized users.

  While the /v1/users.createToken endpoint is being retained, the users.createToken method has been removed.

• The /v1/e2e.updateGroupKey endpoint has been undeprecated. It is no longer marked for deprecation and will continue to be supported within the workspace.

Rocket.Chat Voice improvements

With the launch of the new Rocket.Chat Voice architecture, the deprecated VoIP architecture that relied on the old FreeSwitch integration has been being completely cleared from the codebase. This change does not eliminate FreeSwitch compatibility. Instead, the deprecated FreeSwitch Integration is being replaced with a generic SIP integration that remains fully compatible with FreeSwitch and other SIP-compliant infrastructures.

Due to this removal, workspaces relying on the legacy integration must prepare for the following:

• FreeSwitch components removed: The old VoIP integration with FreeSwitch has been removed. This includes all associated technical components, such as extension management APIs and the collection of VoIP statistics related to FreeSwitch connections and extensions.

• New settings for routing calls: Legacy settings such as the FreeSwitch Integration section and Team Voice Calls Enabled setting have been removed from the workspace UI. Rocket.Chat Voice is now automatically enabled when the Voice add-on is active, allowing intra-workspace calls via standard WebRTC without additional configuration. A dedicated SIP Integration setting is now available for routing calls through external SIP infrastructure.

• VoIP permission changes: The legacy permissions  Manage Voice Calls, View Voice Call Extensions, and Allow Voice Call have been removed. Granular permissions have been introduced to grant access to internal and external calling features in the new Rocket.Chat Voice architecture.

Removal of deprecated features

Several deprecated features will be removed in v8.0.0 to simplify the codebase, improve performance, and mitigate security risks.

• Current Chats removal: The Current Chats page in Omnichannel has been removed in favor of the Contact Center, which serves as the unified interface for managing chats, contacts, and calls.

• OTR feature removed: We have removed the Off-the-Record (OTR) messaging feature designed for exchanging temporary client-side encrypted messages, due to low adoption. For encrypted messaging, consider using End-to-End Encryption (E2EE). E2EE provides improved encryption capabilities that align better with the platform’s core security features.

• Omnichannel Voice Channel (VoIP) removed: The legacy Omnichannel Voice channel feature has been removed, along with its associated API endpoints and permissions. Its Asterisk-based implementation does not support highly scalable, cloud-native VoIP workloads. For voice requirements in Omnichannel, consider integrating scalable VoIP providers or call-center platforms using supported APIs or extensions. Rocket.Chat can also be embedded into third-party call-center solutions using Chat Engine, enabling chat-based communication with your existing VoIP infrastructure.

• WebRTC admin settings removed: The WebRTC workspace administration settings are no longer in use and have been removed completely.

• API endpoint replacements and removals: The following deprecated API methods and endpoints have been removed, with some being replaced by improved alternatives:

• API parameter removals: The following parameters have been permanently removed from their respective API endpoints in v8.0.0:

These changes are vital for ensuring the long-term stability and security of the Rocket.Chat workspaces. Workspace administrators should begin evaluating their current configurations now to facilitate a seamless upgrade to version 8.0.0. For detailed information, check out our GitHub release page.

Rocket.Chat v7.0.0

Platform and database enhancements

• We have upgraded the platform to Meteor 3.0 and Node.js 20, bringing in the latest security improvements, bug fixes, and performance optimizations. However, this update may require environmental adjustments, especially if your application relies on older Node.js features or Meteor packages. Developers should review their environment and ensure all dependencies are compatible with these new versions.

• With MongoDB 4.4 reaching end-of-life, we have discontinued its support in favor of MongoDB 7.0. The new version offers enhanced performance, security improvements, and new features like support for multi-document ACID transactions. MongoDB 5.0 is now deprecated. If you're still using MongoDB 4.4 or 5.0, an upgrade is necessary to maintain compatibility with our platform. It’s important to test your database migration thoroughly to avoid potential data or performance issues.

Security and compliance updates

• Removal of Compatible Sandbox (vm2) for Integration Scripts: We've fully removed the Compatible Sandbox option for integration scripts. Previously, Rocket.Chat allowed users to choose between two sandboxing libraries for script execution: vm2 (Compatible Sandbox) and isolated-vm (Secure Sandbox). Due to critical security vulnerabilities and lack of ongoing support for vm2, it is no longer available as of version 7.0. All scripts will now run exclusively in the Secure Sandbox environment. This change may impact integration scripts that relied on vm2's behavior. Review your integration scripts to ensure they are compatible with the secure sandbox.

• Enhanced security for app installations: Starting with this release, the ability to upload private apps is now restricted to our Starter and Premium plans. This change helps us maintain the integrity of Rocket.Chat's customization options while safeguarding the exclusive features of our paid plans. By limiting private app uploads, we ensure that only licensed users can fully tailor their experience, protecting the value and security of our platform.

• The ability to install apps from a URL will be removed.

• Unused settings such as UI_Click_Direct_Message and the view-history permission have been removed to comply with security best practices and reduce clutter.

Permissions and endpoint enhancements

• New permissions for room management in teams: New permissions (create-team-channel and create-team-group) have been added to enhance control over room creation within teams. These permissions integrate closely with team management functions and ensure proper visibility and control.

• Improved error messaging for login attempts: The login process will no longer suggest which credential is incorrect, returning a generic "Unauthorized" error instead to enhance security.

• Disabled query and fields API parameters: The query and fields parameters have been disabled and can only be enabled by setting the ALLOW_UNSAFE_QUERY_AND_FIELDS_API_PARAMS: true environment variable. Enabling them may expose your workspace to security breaches, for which Rocket.Chat is not responsible. These parameters will be completely removed on 9.0.0.

Omnichannel and integration adjustments

• Fixes for stuck omnichannel rooms: A migration will correct the statuses of inquiries linked to rooms that are closed but still listed as active due to systemic issues.

• Removed dependencies: The dependency on the meteor/check package has been removed from all v1 endpoints to avoid errors and enhance performance.

Air-gapped workspace restrictions for commercial licensing

Starting with this release, Rocket.Chat Community Edition will no longer support air-gapped environments (environments without internet access). To ensure compliance with licensing agreements, only users on premium plans—including the free Starter plan—can run Rocket.Chat in these air-gapped setups. Our standard builds include commercial code, so restricting air-gapped environments to premium users helps maintain security and proper licensing compliance. Community users who need Rocket.Chat without commercial restrictions can use the fossify script. This tool removes all premium code, leaving a fully open-source version with no limitations (e.g., no user or MAC limits). While this doesn’t include our commercial air-gapped setup, it allows users to build their own offline solutions and customize them on top of our open-source code as they wish. For details, check out the fossify script.

Removal of deprecated features

Several outdated features have been removed to streamline the codebase and improve overall system performance:

• HipChat importer removed: Due to the discontinuation of HipChat, the HipChat importer is no longer supported. If you’re still migrating from HipChat, consider using alternative import methods or manually migrating your data.

• Unused oauth settings removed: We’ve pruned unused and outdated OAuth settings to simplify the configuration process. The button text color and button color settings will be removed. If your system still relies on these deprecated settings, update your configurations to avoid potential authentication issues.

• API endpoint replacements and removals: The following older API methods and endpoints have been deprecated in favor of newer, more efficient ones.

• The following parameters have been removed and replaced.

This update is critical for maintaining the operational integrity, security, and efficiency of Rocket.Chat workspaces. Workspace managers should review these changes carefully and begin preparations for a smooth transition to version 7.0.0.

For detailed information, check out our GitHub release page.