List view

[FEATURE][AUTH]: ABAC virtual server support

enhancementNew feature or requestNew feature or request

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

Status: Open.

Feature

#706 In IBM/mcp-context-forge;

· CalebBartleMAA opened on Aug 10, 2025

[EPIC][SECURITY]: Security clearance levels plugin - Bell-LaPadula MAC implementation

COULDP3: Nice-to-have features with minimal impact if left out; included if time permitsP3: Nice-to-have features with minimal impact if left out; included if time permits

enhancementNew feature or requestNew feature or request

epicLarge feature spanning multiple issuesLarge feature spanning multiple issues

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

sweng-group-5Group 5 - Policy-as-Code Security & Compliance AutomationGroup 5 - Policy-as-Code Security & Compliance Automation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#1245 In IBM/mcp-context-forge;

· crivetimihai opened on Oct 14, 2025

[EPIC][TESTING]: MCP compliance checker - Automated specification testing tool

epicLarge feature spanning multiple issuesLarge feature spanning multiple issues

mcp-2025-06-18MCP 2025-06-18 protocol specificationMCP 2025-06-18 protocol specification

mcp-protocolAlignment with MCP protocol or specificationAlignment with MCP protocol or specification

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Feature

#1286 In IBM/mcp-context-forge;

· crivetimihai opened on Oct 18, 2025

[EPIC][AUTH]: Two-factor authentication (2FA) - TOTP/Google Authenticator support

enhancementNew feature or requestNew feature or request

epicLarge feature spanning multiple issuesLarge feature spanning multiple issues

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

Status: Open.

Feature

#1374 In IBM/mcp-context-forge;

· crivetimihai opened on Oct 30, 2025

[EPIC][SECURITY]: A2AS framework - Runtime security and self-defense for MCP and A2A

a2aSupport for A2A protocolSupport for A2A protocol

COULDP3: Nice-to-have features with minimal impact if left out; included if time permitsP3: Nice-to-have features with minimal impact if left out; included if time permits

epicLarge feature spanning multiple issuesLarge feature spanning multiple issues

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

Status: Open.

Feature

#1377 In IBM/mcp-context-forge;

· crivetimihai opened on Oct 31, 2025

[FEATURE][AUTH]: Migrate from JWT tokens to short opaque API tokens

enhancementNew feature or requestNew feature or request

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

Status: Open.

Feature

#1456 In IBM/mcp-context-forge;

· kevalmahajan opened on Nov 18, 2025

[EPIC][AUTH]: Agent and tool authentication and authorization plugin

enhancementNew feature or requestNew feature or request

epicLarge feature spanning multiple issuesLarge feature spanning multiple issues

fully-decomposedEpic has all tasks mapped to child issues or existing implementationsEpic has all tasks mapped to child issues or existing implementations

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

sweng-group-5Group 5 - Policy-as-Code Security & Compliance AutomationGroup 5 - Policy-as-Code Security & Compliance Automation

tcdSwEng ProjectsSwEng Projects

wxowxo integrationwxo integration

Status: Open.

Feature

#1422 In IBM/mcp-context-forge;

· imolloy opened on Nov 12, 2025

[FEATURE]: Centralized configurable RBAC/ABAC policy engine

database

enhancementNew feature or requestNew feature or request

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

sweng-group-5Group 5 - Policy-as-Code Security & Compliance AutomationGroup 5 - Policy-as-Code Security & Compliance Automation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2019 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 10, 2026

[FEATURE][AUTH]: Generic OIDC group to team mapping for SSO

enhancementNew feature or requestNew feature or request

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

sweng-group-5Group 5 - Policy-as-Code Security & Compliance AutomationGroup 5 - Policy-as-Code Security & Compliance Automation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2120 In IBM/mcp-context-forge;

· madhav-prabhu opened on Jan 15, 2026

[EPIC][SECURITY]: MCP server security posture assessment - Pre-deployment scanning and validation

enhancementNew feature or requestNew feature or request

epicLarge feature spanning multiple issuesLarge feature spanning multiple issues

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

sweng-group-12SwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment ValidationSwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment Validation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2215 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 20, 2026

[FEATURE][SECURITY]: Container vulnerability scanner - Trivy/Grype integration

devopsDevOps activities (containers, automation, deployment, makefiles, etc)DevOps activities (containers, automation, deployment, makefiles, etc)

enhancementNew feature or requestNew feature or request

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

plugins

securityImproves securityImproves security

sweng-group-12SwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment ValidationSwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment Validation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2216 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 20, 2026

[FEATURE][SECURITY]: MCP server source code scanner - Semgrep/Bandit integration

enhancementNew feature or requestNew feature or request

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

sweng-group-12SwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment ValidationSwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment Validation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2217 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 20, 2026

[FEATURE][SECURITY]: SBOM generator - CycloneDX/SPDX for MCP servers

enhancementNew feature or requestNew feature or request

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

sweng-group-12SwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment ValidationSwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment Validation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2218 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 20, 2026

[FEATURE][SECURITY]: MCP server security policy engine - Configurable compliance gates

enhancementNew feature or requestNew feature or request

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

sweng-group-12SwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment ValidationSwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment Validation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2219 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 20, 2026

[EPIC][SECURITY]: Policy-as-code security and compliance automation platform

enhancementNew feature or requestNew feature or request

epicLarge feature spanning multiple issuesLarge feature spanning multiple issues

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

sweng-group-5Group 5 - Policy-as-Code Security & Compliance AutomationGroup 5 - Policy-as-Code Security & Compliance Automation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2222 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 20, 2026

[FEATURE][POLICY]: Policy audit trail and decision logging

COULDP3: Nice-to-have features with minimal impact if left out; included if time permitsP3: Nice-to-have features with minimal impact if left out; included if time permits

enhancementNew feature or requestNew feature or request

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

sweng-group-5Group 5 - Policy-as-Code Security & Compliance AutomationGroup 5 - Policy-as-Code Security & Compliance Automation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2225 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 20, 2026

[FEATURE][POLICY]: Policy testing and simulation sandbox

COULDP3: Nice-to-have features with minimal impact if left out; included if time permitsP3: Nice-to-have features with minimal impact if left out; included if time permits

enhancementNew feature or requestNew feature or request

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

sweng-group-5Group 5 - Policy-as-Code Security & Compliance AutomationGroup 5 - Policy-as-Code Security & Compliance Automation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2226 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 20, 2026

[FEATURE][SECURITY]: Generic IP-based access control (allowlist)

enhancementNew feature or requestNew feature or request

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

sweng-group-5Group 5 - Policy-as-Code Security & Compliance AutomationGroup 5 - Policy-as-Code Security & Compliance Automation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#536 In IBM/mcp-context-forge;

· crivetimihai opened on Jul 20, 2025

[FEATURE][SECURITY]: Supply chain attack detection - Typosquatting and dependency confusion

enhancementNew feature or requestNew feature or request

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

sweng-group-12SwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment ValidationSwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment Validation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2234 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 20, 2026

[FEATURE][SECURITY]: Container image signing and verification - Sigstore/Cosign integration

devopsDevOps activities (containers, automation, deployment, makefiles, etc)DevOps activities (containers, automation, deployment, makefiles, etc)

enhancementNew feature or requestNew feature or request

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

plugins

securityImproves securityImproves security

sweng-group-12SwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment ValidationSwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment Validation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2235 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 20, 2026

[FEATURE][SECURITY]: Security posture drift alerting - Continuous CVE monitoring

enhancementNew feature or requestNew feature or request

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

sweng-group-12SwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment ValidationSwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment Validation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2236 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 20, 2026

[FEATURE][SECURITY]: MCP-specific security rules - Custom Semgrep/CodeQL for MCP patterns

enhancementNew feature or requestNew feature or request

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

sweng-group-12SwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment ValidationSwEng Group 12 - AI-Powered Security Scanner MCP Server for Pre-Deployment Validation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2237 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 20, 2026

[FEATURE][POLICY]: Policy GitOps and version control

COULDP3: Nice-to-have features with minimal impact if left out; included if time permitsP3: Nice-to-have features with minimal impact if left out; included if time permits

enhancementNew feature or requestNew feature or request

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

sweng-group-5Group 5 - Policy-as-Code Security & Compliance AutomationGroup 5 - Policy-as-Code Security & Compliance Automation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2238 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 20, 2026

[FEATURE][POLICY]: Policy conflict detection and resolution

COULDP3: Nice-to-have features with minimal impact if left out; included if time permitsP3: Nice-to-have features with minimal impact if left out; included if time permits

enhancementNew feature or requestNew feature or request

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

sweng-group-5Group 5 - Policy-as-Code Security & Compliance AutomationGroup 5 - Policy-as-Code Security & Compliance Automation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2239 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 20, 2026

[FEATURE][POLICY]: Policy impact analysis and what-if simulation

COULDP3: Nice-to-have features with minimal impact if left out; included if time permitsP3: Nice-to-have features with minimal impact if left out; included if time permits

enhancementNew feature or requestNew feature or request

plugins

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

sweng-group-5Group 5 - Policy-as-Code Security & Compliance AutomationGroup 5 - Policy-as-Code Security & Compliance Automation

tcdSwEng ProjectsSwEng Projects

Status: Open.

Feature

#2240 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 20, 2026