Search results

Add SSE backend test fake and table-drive HeaderForward regression test

enhancementNew feature or requestNew feature or request

vmcpVirtual MCP Server related issuesVirtual MCP Server related issues

Status: Open.

#5303 In stacklok/toolhive;

· lorr1 opened on May 16, 2026

Proxyrunner liveness probe restarts the pod when upstream MCPServer takes >60s to become Ready

bugSomething isn't workingSomething isn't working

kubernetesItems related to KubernetesItems related to Kubernetes

operator

proxy

Status: Open.

#5299 In stacklok/toolhive;

· gabrielcosi opened on May 16, 2026

security: proxy forwards upstream credential tokens in tool result bodies unchanged

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

proxy

security

Status: Open.

#5293 In stacklok/toolhive;

· amirejaz opened on May 15, 2026

feat(proxy): validate JSON-RPC frames in SSE event stream

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

proxy

security

Status: Open.

#5292 In stacklok/toolhive;

· amirejaz opened on May 15, 2026

MCPServerEntry.headerForward.addPlaintextHeaders is silently ignored — never reaches upstream

bugSomething isn't workingSomething isn't working

kubernetesItems related to KubernetesItems related to Kubernetes

operator

Status: Open.

#5289 In stacklok/toolhive;

· lorr1 opened on May 15, 2026

OIDC proxy does not enforce scope claims from incoming JWTs (--oidc-scopes only advertises, not validates)

authentication

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

security

Status: Open.

#5284 In stacklok/toolhive;

· amirejaz opened on May 14, 2026

Align registry API with toolhive-registry-server v0.1 surface

apiItems related to the APIItems related to the API

goPull requests that update go codePull requests that update go code

registry

Status: Open.

Chore 🧹

#5279 In stacklok/toolhive;

· rdimitrov opened on May 14, 2026

Remove legacy registry format internals from toolhive

apiItems related to the APIItems related to the API

cliChanges that impact CLI functionalityChanges that impact CLI functionality

goPull requests that update go codePull requests that update go code

registry

Status: Open.

Chore 🧹

#5278 In stacklok/toolhive;

· rdimitrov opened on May 14, 2026

vMCP AuthzConfig struct missing GroupEntityType, GroupClaimName, RoleClaimName — Cedar group/role policies fail silently

authorization

bugSomething isn't workingSomething isn't working

goPull requests that update go codePull requests that update go code

operator

vmcpVirtual MCP Server related issuesVirtual MCP Server related issues

Status: Open.

#5277 In stacklok/toolhive;

· jhrozek opened on May 14, 2026

feat(llm): auto-start proxy after setup when proxy-mode tools are configured

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

llm gatewayLLM gateway authentication featureLLM gateway authentication feature

Status: Open.

#5272 In stacklok/toolhive;

· lorr1 opened on May 13, 2026

authz: SSE response filter leaks unfiltered tools/list on undecodable / non-Response data lines (bypasses cedar)

bugSomething isn't workingSomething isn't working

critical

goPull requests that update go codePull requests that update go code

security

Status: Open.

#5257 In stacklok/toolhive;

· gastoncan opened on May 12, 2026

Surface baselineClientScopes misconfig via MCPExternalAuthConfig / VirtualMCPServer status condition

authentication

kubernetesItems related to KubernetesItems related to Kubernetes

operator

Status: Open.

#5252 In stacklok/toolhive;

· jhrozek opened on May 11, 2026