Search results

VirtualMCPServer controller should re-reconcile when a referenced authz ConfigMap changes

authorization

enhancementNew feature or requestNew feature or request

kubernetesItems related to KubernetesItems related to Kubernetes

operator

vmcpVirtual MCP Server related issuesVirtual MCP Server related issues

Status: Open.

#5270 In stacklok/toolhive;

· jhrozek opened on May 13, 2026

Flaky api-workloads E2E suite: 15m TEST_TIMEOUT too tight for the workload-heavy matrix entry

apiItems related to the APIItems related to the API

bugSomething isn't workingSomething isn't working

ci-cd

goPull requests that update go codePull requests that update go code

testing

Status: Open.

#5265 In stacklok/toolhive;

· jhrozek opened on May 12, 2026

authz: SSE response filter leaks unfiltered tools/list on undecodable / non-Response data lines (bypasses cedar)

bugSomething isn't workingSomething isn't working

critical

goPull requests that update go codePull requests that update go code

security

Status: Open.

#5257 In stacklok/toolhive;

· gastoncan opened on May 12, 2026

Surface baselineClientScopes misconfig via MCPExternalAuthConfig / VirtualMCPServer status condition

authentication

kubernetesItems related to KubernetesItems related to Kubernetes

operator

Status: Open.

#5252 In stacklok/toolhive;

· jhrozek opened on May 11, 2026

security: proxy forwards malformed upstream JSON-RPC frames to clients without validation

Status: Open.

#5247 In stacklok/toolhive;

· amirejaz opened on May 11, 2026

vMCP: extend backend-init list-method tolerance to HTTP-level method-missing signals

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

vmcpVirtual MCP Server related issuesVirtual MCP Server related issues

Status: Open.

#5242 In stacklok/toolhive;

· tgrunnagle opened on May 10, 2026

Add requiredClientScopes to embedded auth server for DCR scope baseline

authentication

enhancementNew feature or requestNew feature or request

kubernetesItems related to KubernetesItems related to Kubernetes

oauth

operator

Status: Open.

#5224 In stacklok/toolhive;

· jhrozek opened on May 7, 2026

Migrate CLI OAuth flow to pkg/auth/dcr resolver

auth

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

oauth

tech-debt

Status: Open.

#5219 In stacklok/toolhive;

· tgrunnagle opened on May 7, 2026

ToolHive should support the Identity-Assertion JWT Authorization Grant (ID-JAG / XAA) for cross-domain backend authentication

authentication

authorization

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

researchWork that is speculative and would either be gated behind a flag or just land in a branchWork that is speculative and would either be gated behind a flag or just land in a branch

Status: Open.

#5218 In stacklok/toolhive;

· jhrozek opened on May 7, 2026

Set explicit DACL on Windows discovery directory under %LOCALAPPDATA%

bugSomething isn't workingSomething isn't working

goPull requests that update go codePull requests that update go code

security

Status: Open.

#5217 In stacklok/toolhive;

· samuv opened on May 7, 2026

llm proxy: add --disable-streaming flag to force stream:false for clients that don't handle SSE

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

proxy

Status: Open.

#5213 In stacklok/toolhive;

· yrobla opened on May 7, 2026

vMCP: Load authz config from ConfigMap (policies + primaryUpstreamProvider)

authorization

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

kubernetesItems related to KubernetesItems related to Kubernetes

operator

vmcpVirtual MCP Server related issuesVirtual MCP Server related issues

Status: Open.

#5208 In stacklok/toolhive;

· tgrunnagle opened on May 6, 2026