Issues

• vMCP core backend calls use ctx identity instead of the explicit identity

  authneeds-triagetech-debtvmcp
  stacklok/toolhive#7143 · Filter by author tgrunnagle opened on Nov 14, 2026

• Auth server: no grace period for rotated client refresh tokens, concurrent sessions get invalid_grant

  needs-triage
  stacklok/toolhive#7126 · Filter by author carlos-lopez-vecino opened on Nov 12, 2026

• thv proxy stdio: upstream initialize fails against Semgrep remote MCP (Unsupported protocol version 2026-07-28), no fallback

  needs-triage
  stacklok/toolhive#7119 · Filter by author ramzimalhas opened on Nov 12, 2026

• Operator chart: no cluster-scoped RBAC needed with operator.rbac.scope=namespace

  kubernetesneeds-triage
  stacklok/toolhive#7112 · Filter by author lucianstancu opened on Nov 11, 2026

• Reduce log spam of vMCP pod by logging cache sync messages at debug

  kubernetesneeds-triage
  stacklok/toolhive#7109 · Filter by author nogweii opened on Nov 11, 2026
  1

• MCPServer spec.resources is applied to the proxy-runner container, not the MCP server container

  stacklok/toolhive#7101 · Filter by author blarghmatey opened on Nov 10, 2026
  1

• Allow configuring the DCR client_name sent during upstream dynamic client registration

  stacklok/toolhive#7094 · Filter by author imaxmelnyk opened on Nov 10, 2026
  1

• vMCP loses stateful backend sessions between tool calls after Serve/core migration

  bugneeds-triage
  stacklok/toolhive#7069 · Filter by author sym-stiller opened on Nov 6, 2026
  1

• Keep Service ports added by other writers when the operator updates a Service

  needs-triage
  stacklok/toolhive#7068 · Filter by author jhrozek opened on Nov 6, 2026

• MCPRemoteProxy podTemplateSpec ports without protocol cause repeated Deployment updates

  needs-triage
  stacklok/toolhive#7064 · Filter by author jhrozek opened on Nov 6, 2026

• vMCP: accept an access token for the one call its authorization_details names, once

  needs-triage
  stacklok/toolhive#7062 · Filter by author ChrisJBurns opened on Nov 5, 2026

• Authorization server: narrow a JWT-bearer access token to one MCP call with authorization_details

  needs-triage
  stacklok/toolhive#7061 · Filter by author ChrisJBurns opened on Nov 5, 2026

• Let tokens without an upstream session reach backends that need no per-user credential

  authenticationauthorizationenhancementgoneeds-triage
  stacklok/toolhive#7060 · Filter by author jhrozek opened on Nov 5, 2026

• Operator chart: release-qualify the RBAC object names so two releases can coexist

  helmkubernetesneeds-triageoperatorrbac
  stacklok/toolhive#7058 · Filter by author Nashon-Steffen opened on Nov 5, 2026

• authserver storage: add an Azure Entra ID auth type for Redis (Azure Managed Redis)

  needs-triage
  Task 📋

  stacklok/toolhive#7057 · Filter by author reyortiz3 opened on Nov 5, 2026

• Failed workload setup leaves its network and DNS container behind

  bugneeds-triage
  stacklok/toolhive#7045 · Filter by author tgrunnagle opened on Nov 3, 2026

• Removing a starting or updating workload leaks its Docker network

  needs-triage
  stacklok/toolhive#7043 · Filter by author tgrunnagle opened on Nov 3, 2026

• Authorization server: require the issuer as the only aud of a private_key_jwt client assertion

  needs-triage
  stacklok/toolhive#7039 · Filter by author jhrozek opened on Nov 3, 2026

• Add real-client integration tests for mcpcompat protocol-status handling

  stacklok/toolhive#7034 · Filter by author jhrozek opened on Nov 3, 2026

• Adopt mcpcompat MetaKeyServerInfo and remove modernServerInfoKey

  stacklok/toolhive#7033 · Filter by author jhrozek opened on Nov 3, 2026
  1

• Authorization server: reason codes in error_description for ID-JAG redemption refusals

  stacklok/toolhive#7030 · Filter by author ChrisJBurns opened on Nov 3, 2026
  

• vMCP drops the instructions of backend servers

  stacklok/toolhive#7020 · Filter by author Viphava280444 opened on Nov 2, 2026
  2

  

• Follow-ups from the exchange refresh token review

  needs-triage
  stacklok/toolhive#7011 · Filter by author jhrozek opened on Oct 30, 2026

• vMCP multi-upstream auth: scope refresh failures per provider, let headless callers reach xaa backends

  needs-triage
  stacklok/toolhive#7009 · Filter by author aron-muon opened on Oct 30, 2026

• Support CIMD for embedded auth server upstream registration

  kubernetes
  stacklok/toolhive#6997 · Filter by author danbarr opened on Oct 29, 2026
  2