Issues

• [CHORE]: Remove DEFAULT_CACHE_TTL and plugin manager cache TTL knob

  choredeprecationSHOULD
  IBM/mcp-context-forge#7256 · Filter by author Lang-Akshay opened on Oct 16, 2026

• [DOCS]: All Documentation References Non-Existant Image Tags (except latest)

  documentationtriage
  IBM/mcp-context-forge#7248 · Filter by author AndyStevens98 opened on Oct 15, 2026

• [CHORE]: Track shared agent skills in .agents/skills with .bob/skills symlink

  choretriage
  IBM/mcp-context-forge#7242 · Filter by author jonpspri opened on Oct 15, 2026

• [FEATURE]: Support RFC 8693 delegation with actor_token on token-exchange gateways

  enhancementsecuritySHOULD
  IBM/mcp-context-forge#7238 · Filter by author lharrison13 opened on Oct 14, 2026

• [FEATURE]: Admin UI support for token-exchange gateways and a separate discovery credential

  enhancementsecuritySHOULD
  IBM/mcp-context-forge#7236 · Filter by author lharrison13 opened on Oct 14, 2026
  1

  

• [TESTING]: Module-reload tests slow the suite; correlation-ID leak breaks test isolation

  testingtriage
  IBM/mcp-context-forge#7228 · Filter by author jonpspri opened on Oct 14, 2026

• [TESTING]: Plugin-subsystem tests re-execute mcpgateway.main

  testingtriage
  IBM/mcp-context-forge#7227 · Filter by author jonpspri opened on Oct 14, 2026

• [TESTING]: Redis startup test re-executes mcpgateway.main

  testingtriage
  IBM/mcp-context-forge#7226 · Filter by author jonpspri opened on Oct 14, 2026

• [TESTING]: UI-route tests re-execute mcpgateway.main

  testingtriage
  IBM/mcp-context-forge#7225 · Filter by author jonpspri opened on Oct 14, 2026

• [TESTING]: Optional-router mount tests re-execute mcpgateway.main

  testingtriage
  IBM/mcp-context-forge#7224 · Filter by author jonpspri opened on Oct 14, 2026

• [TESTING]: Middleware registration tests reload the full application

  testingtriage
  IBM/mcp-context-forge#7223 · Filter by author jonpspri opened on Oct 14, 2026

• [BUG]: Token-exchange gateways silently drop scope, real exchange reads oauth_config["scopes"] instead of "scope"

  bugtriage
  IBM/mcp-context-forge#7220 · Filter by author drtinkerer opened on Oct 13, 2026

• [TESTING]: Unit tests pay full mcpgateway.main import cost per test; correlation-ID contextvar leaks across xdist workers

  securitySHOULDtesting
  IBM/mcp-context-forge#7215 · Filter by author jonpspri opened on Oct 13, 2026
  1

• [BUG]: Upstream sessions leak (CLOSE_WAIT) when a Streamable HTTP session ends without DELETE

  IBM/mcp-context-forge#7214 · Filter by author pos-ei-don opened on Oct 13, 2026

• [BUG]: Bound upstream MCP JSON response buffering and read time

  bugmcp-protocolpythonsecuritytriage
  IBM/mcp-context-forge#7211 · Filter by author msureshkumar88 opened on Oct 12, 2026

• [BUG]: InstanaTracer.start_as_current_span() rejects the 'context' kwarg and aborts MCP requests (instana < 3.12)

  bugicaSHOULDwork-queue
  IBM/mcp-context-forge#7208 · Filter by author jonpspri opened on Oct 12, 2026
  1

• [BUG]: DB token backend refreshes an expired authorization_code token twice in parallel; with refresh-token rotation the gateway loses its token (invalid_grant → deleted)

  IBM/mcp-context-forge#7207 · Filter by author santiagomalter opened on Oct 12, 2026

• [EPIC]: OAuth/OIDC Complete Implementation for MCP - RFCs 8693, 9728, 9396 and CIMD

  enhancementoauth-oidcsecuritywork-queue
  Epic

  IBM/mcp-context-forge#7206 · Filter by author jonpspri opened on Oct 12, 2026

• [FEATURE]: Add an anonymous Parallel Search MCP catalog option

  IBM/mcp-context-forge#7197 · Filter by author georgeatparallel opened on Oct 11, 2026

• [FEATURE]: RFC 9728 coverage for the root /mcp endpoint and /v1/* path aliases

  apienhancementmcp-protocoltriage
  IBM/mcp-context-forge#7189 · Filter by author jonpspri opened on Oct 9, 2026

• [DOCS]: Add rfc9728-compliance.md to the architecture navigation

  documentationtriage
  IBM/mcp-context-forge#7187 · Filter by author jonpspri opened on Oct 9, 2026

• [CHORE]: dataplane publisher follow-up polish from PR #6994 review

  choreCOULDtriage
  IBM/mcp-context-forge#7170 · Filter by author prakhar-singh1928 opened on Oct 7, 2026
  

• [BUG]: Virtual server OAuth and token-exchange unusable with HTTP localhost IdPs — SSRF_ALLOW_LOCALHOST ignored in three guards

  gearboxwork-queue
  Bug

  IBM/mcp-context-forge#7165 · Filter by author Tissandier opened on Oct 7, 2026

• [BUG]: Health check marks gateway permanently unreachable on 307 redirect

  gearboxwork-queue
  Bug

  IBM/mcp-context-forge#7163 · Filter by author Tissandier opened on Oct 7, 2026

• Per-gateway identity_propagation is ignored on the MCP/REST tool-call path (v1.0.11)

  IBM/mcp-context-forge#7160 · Filter by author gkinter opened on Oct 7, 2026