diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index e18ee07..37fcefa 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.0.0"
+  ".": "1.0.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..2de7d6f
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,20 @@
+# Changelog
+
+## 1.0.0 (2026-07-23)
+
+
+### Features
+
+* add initial implementation ([5a9c3be](https://github.com/spotify/confidence-cli/commit/5a9c3be3498612d126b7be2f2730293441fdeebb))
+* tighten CI and agents' permissions, warn about agents' capabilities ([#9](https://github.com/spotify/confidence-cli/issues/9)) ([a38b98f](https://github.com/spotify/confidence-cli/commit/a38b98feb24fa2a17cb0a5108e4e1cbcd661069f))
+* write cursor CLI permissions when registering MCPs ([#5](https://github.com/spotify/confidence-cli/issues/5)) ([6fee566](https://github.com/spotify/confidence-cli/commit/6fee5660ab992ab50775dae776d8c4b06501953f))
+* write cursor permissions for MCP when registering ([6fee566](https://github.com/spotify/confidence-cli/commit/6fee5660ab992ab50775dae776d8c4b06501953f))
+
+
+### Bug Fixes
+
+* audit fix for `fast-uri` ([#8](https://github.com/spotify/confidence-cli/issues/8)) ([1ff9830](https://github.com/spotify/confidence-cli/commit/1ff98307eb302b9041e500656d351a4d7262b566))
+* ensure status lines shown when onboarding, ask install when token is invalid ([9291d58](https://github.com/spotify/confidence-cli/commit/9291d588576dd68c42f6b3e667659866b0350458))
+* handle expired MCP auth gracefully ([#4](https://github.com/spotify/confidence-cli/issues/4)) ([2676bb4](https://github.com/spotify/confidence-cli/commit/2676bb4281bc88c9f6e5de00207ccc28d861337b))
+* refresh MCP auth on consecutive runs ([514e619](https://github.com/spotify/confidence-cli/commit/514e61968eb65e3796a4b8801228158bfef704d1))
+* tighten token files permissions ([#12](https://github.com/spotify/confidence-cli/issues/12)) ([5e5d5d9](https://github.com/spotify/confidence-cli/commit/5e5d5d982a6f14617f901356db774db9610f1514))
diff --git a/package.json b/package.json
index 451066d..27d2b4c 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@spotify-confidence/quickstart",
-  "version": "0.0.0",
+  "version": "1.0.0",
   "description": "Get started with Confidence in minutes.",
   "license": "Apache-2.0",
   "type": "module",