---
title: "Shipped vs planned"
summary: "Capability availability, contract stability and operating limits."
description: "What the current Pitot binary does, what runs but may still change shape, and what is only designed."
status: preview
read_when:
  - "You are deciding whether to build something durable on a Pitot capability."
  - "A page describes something and you want to know whether it executes today."
---
Pitot is alpha. User-facing contracts and storage formats can change without
migration paths. Every documentation page states one of these statuses:

| Marker | Meaning |
|---|---|
| `shipped` | Available with a settled contract. |
| `preview` | Available; the contract can change without a migration path. |
| `planned` | Designed but unavailable. |

`llms.txt` includes the status of every non-shipped page. A page covering several
capabilities uses `preview` if any of its contracts remain unsettled.

## Where each capability stands

| Capability | Status | Notes |
|---|---|---|
| OTLP ingest over gRPC and HTTP | shipped | Both transports, one port and named ingest tokens. |
| Parquet storage, trace indexes, and DuckDB analytics | preview | Authoritative local Parquet; rebuildable DuckDB query state. |
| Batch format 5 storage | preview | [Typed Parquet attributes and dedicated columns](/docs/concepts/storage); unsupported batch formats prevent startup. |
| Browser client | preview | Ships in the binary; preview contracts. |
| Explore | preview | [Query, Builder and SQL tabs](/docs/guides/explore) run queries and save dashboard panels without an AI provider. |
| Logs and Traces search | preview | [Search with FanQL filters](/docs/guides/explore#search-logs-and-traces), inspect results and save panels. |
| FanQL | preview | [Text queries](/docs/reference/fanql) with diagnostics and completion; filter-only search on Logs and Traces. |
| Built-in agent | preview | Disabled unless `PITOT_AI_PROVIDER` selects `anthropic` or `openai`; the selected provider's key is required at startup. |
| Dashboards | preview | [Build with the panel editor or chat](/docs/guides/dashboards): fifteen panel types, variables, comparison, saved grids and immutable versions with restore. View links retain filters and time; dashboard access remains owner-scoped. |
| MCP tools | preview | Served at `/mcp`; the tool set is not frozen. |
| Alerts page | preview | [Create, edit, test, enable and delete rules](/docs/guides/alerts) without chat; rules evaluate on an interval against rollups. |
| Connected agents | preview | List and disconnect your authorized MCP agents on **Connect telemetry**. |
| Named ingest tokens | preview | Administrators create, list and revoke up to 50 named tokens on **Connect telemetry** at `/settings/ingest` or through HTTP. Revocation applies on the next request. |
| Insights and anomaly detection | preview | Detect error, latency and volume changes against rollup baselines; report insights, log patterns and a health score. |
| Local email sign-in | shipped | Codes by email; no passwords. |
| Local self-signup | preview | `PITOT_SELF_SIGNUP`, off by default. Provisions viewers after code verification only. |
| SCIM user provisioning | preview | `PITOT_SCIM_TOKEN` enables [create, update and deactivate over SCIM 2.0](/docs/concepts/authentication) in OIDC mode. |
| Alert email | preview | [Rules deliver to email addresses](/docs/guides/alerts) through the configured SMTP settings. |
| OIDC account auto-provisioning | preview | Eligible identities receive the configured mapped or default role; the default is viewer. |
| OIDC sign-in | shipped | Provider flow, with group and domain mapping. |
| Generated settings reference | shipped | `cmd/pitot-docgen` writes it; `just check` fails when it drifts from the type. |
| Release checksums and provenance | shipped | `SHA256SUMS` plus GitHub build attestations on every archive. |
| Published ingest benchmark | shipped | [Performance](/docs/concepts/performance) reports v2026.11.0-alpha with three sweep repetitions and [raw evidence](https://github.com/labstack/pitot-bench/tree/main/published/2026-11-06-ccx33x2-v2026.11.0-alpha). |
| Signatures and SBOM | planned | Unavailable; see the [release contract](https://github.com/labstack/pitot/blob/main/docs/release.md#supply-chain-scope). |
| Namespace scoping on alert rules | planned | The field is stored but evaluation ignores it; scope with `service`. |

## Operating limits

- Namespaces filter queries. Anyone who can query an instance can query every namespace in it. Each instance is one trust domain; use separate instances for mutually untrusted teams. A namespace does not represent a user, organisation or tenant.
- **No horizontal scale.** Ingest, query and maintenance share one process and one machine.
- **Capacity depends on your workload.** Payload cardinality, query mix and disk determine capacity. The published benchmark measures one release, host and workload. [Measure your own hardware](/docs/concepts/performance).
- **No migration paths.** Pitot is pre-release. Storage-format changes may require a fresh data directory. Preserve backups before upgrading.

Keep a separate copy of data you need to retain.