Search results

[CHORE]: Centralize Layer-1 visibility filter across streamablehttp transport (incl. _auth_jwt split-brain)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

mcp-protocolAlignment with MCP protocol or specificationAlignment with MCP protocol or specification

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

triageIssues / Features awaiting triageIssues / Features awaiting triage

Status: Open.

#4452 In IBM/mcp-context-forge;

· jonpspri opened on Apr 26, 2026

[CHORE]: Centralize Layer-1 visibility filter across main.py REST endpoints

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

triageIssues / Features awaiting triageIssues / Features awaiting triage

Status: Open.

#4451 In IBM/mcp-context-forge;

· jonpspri opened on Apr 26, 2026

[SECURITY]: Expand inbound passthrough denylist beyond Content-Type to cover Host and other protocol-level headers

enhancementNew feature or requestNew feature or request

securityImproves securityImproves security

triageIssues / Features awaiting triageIssues / Features awaiting triage

Status: Open.

#4450 In IBM/mcp-context-forge;

· jonpspri opened on Apr 26, 2026

[CHORE]: Add ondelete=CASCADE to server_*_association FKs for defense-in-depth

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

dbDatabase and migrationsDatabase and migrations

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

triageIssues / Features awaiting triageIssues / Features awaiting triage

Status: Open.

#4449 In IBM/mcp-context-forge;

· jonpspri opened on Apr 26, 2026

[FEATURE]: Forward elicitation/create over fallback per-call upstream MCP ClientSession

enhancementNew feature or requestNew feature or request

mcp-2025-06-18MCP 2025-06-18 protocol specificationMCP 2025-06-18 protocol specification

mcp-protocolAlignment with MCP protocol or specificationAlignment with MCP protocol or specification

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

triageIssues / Features awaiting triageIssues / Features awaiting triage

Status: Open.

#4445 In IBM/mcp-context-forge;

· jonpspri opened on Apr 26, 2026

[CHORE]: Unify user-email extraction across auth helpers (email vs sub precedence drift)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

securityImproves securityImproves security

triageIssues / Features awaiting triageIssues / Features awaiting triage

Status: Open.

#4442 In IBM/mcp-context-forge;

· jonpspri opened on Apr 26, 2026

[BUG]: GET /mcp/ returns 307 redirect in Edge mode instead of spec-required 200 (SSE) or 405

bugSomething isn't workingSomething isn't working

mcp-protocolAlignment with MCP protocol or specificationAlignment with MCP protocol or specification

triageIssues / Features awaiting triageIssues / Features awaiting triage

Status: Open.

#4441 In IBM/mcp-context-forge;

· jonpspri opened on Apr 24, 2026

[BUG]: Protocol compliance test_health_mirrors_runtime_mode_state fails in Edge mode due to narrow convergence predicate

bugSomething isn't workingSomething isn't working

triageIssues / Features awaiting triageIssues / Features awaiting triage

Status: Open.

#4440 In IBM/mcp-context-forge;

· jonpspri opened on Apr 24, 2026

[CHORE]: Align a2a_server_service and A2AAgentService.list_tasks with post-#4341 admin-bypass private-deny rule

a2aSupport for A2A protocolSupport for A2A protocol

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

rbacRole-based Access ControlRole-based Access Control

securityImproves securityImproves security

triageIssues / Features awaiting triageIssues / Features awaiting triage

Status: Open.

#4437 In IBM/mcp-context-forge;

· jonpspri opened on Apr 24, 2026

[CHORE]: Centralize duplicated FastAPI Query validators to prevent drift (PR #4337 follow-up)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

performancePerformance related itemsPerformance related items

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

triageIssues / Features awaiting triageIssues / Features awaiting triage

Status: Open.

#4436 In IBM/mcp-context-forge;

· jonpspri opened on Apr 24, 2026

[TESTING]: Share URL-percent-encoding test parametrization between validator suites

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

triageIssues / Features awaiting triageIssues / Features awaiting triage

Status: Open.

#4435 In IBM/mcp-context-forge;

· jonpspri opened on Apr 24, 2026

[CHORE][REFACTOR]: Extract shared URL-hardening helpers into mcpgateway/common/_url_hardening.py

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

triageIssues / Features awaiting triageIssues / Features awaiting triage

Status: Open.

#4434 In IBM/mcp-context-forge;

· jonpspri opened on Apr 24, 2026