Issues

• [Design] connect server added from catalog to virtual server

  SHOULDui-rewrite
  Story

  IBM/mcp-context-forge#7460 · Filter by author a-effort opened on Nov 5, 2026
  

• [BUG]: Gateway registration calls tools/list on MCP servers that only serve prompts

  IBM/mcp-context-forge#7459 · Filter by author yashwant938 opened on Nov 5, 2026

• [BUG]: Upstream MCP server 401 during tools/call is flattened to generic JSON-RPC -32603 "Internal error" (status and WWW-Authenticate lost)

  IBM/mcp-context-forge#7453 · Filter by author EimantasPelikis opened on Nov 5, 2026

• [CHORE]: Restore reproducible docs dependencies and strict HTML validation

  choredevopsdocumentationtriage
  IBM/mcp-context-forge#7446 · Filter by author lucarlig opened on Nov 4, 2026

• [CHORE]: Remove Rust sidecar residue while preserving Python internal dispatch

  choredevopspythontriage
  IBM/mcp-context-forge#7445 · Filter by author lucarlig opened on Nov 4, 2026
  

• [BUG]: Tool headers return unmasked when the caller is not identified

  apibugsecuritytriage
  Bug

  IBM/mcp-context-forge#7437 · Filter by author a-effort opened on Nov 4, 2026

• [BUG]: Scoped tokens cannot reach the export and import routes

  apibugsecuritytriage
  Bug

  IBM/mcp-context-forge#7436 · Filter by author a-effort opened on Nov 4, 2026

• [BUG][AUTH] CF 1.1.0: Keycloak client_credentials token accepted on /rpc but rejected on /mcp with 401 Invalid authentication credentials

  buggearboxSHOULDwork-queue
  IBM/mcp-context-forge#7435 · Filter by author thuyanhnguyen opened on Nov 3, 2026
  

• [FEATURE]: Support persistent upstream MCP sessions with OpenTelemetry tracing

  client-eclairenhancementmcp-protocolpythonSHOULDwork-queue
  IBM/mcp-context-forge#7434 · Filter by author vishu-bh opened on Nov 3, 2026
  

• [BUG]: reload_tenant() can reuse a stale shared plugin manager

  bugtriage
  IBM/mcp-context-forge#7431 · Filter by author MateehUllah opened on Nov 3, 2026

• [BUG]: Cancelling one waiter can cancel shared tenant plugin manager initialization

  bugtriage
  IBM/mcp-context-forge#7430 · Filter by author MateehUllah opened on Nov 3, 2026

• [FEATURE]: Design the configuration import experience

  enhancementuiui-rewrite
  Feature

  IBM/mcp-context-forge#7423 · Filter by author a-effort opened on Nov 2, 2026
  1

  

• [FEATURE]: Design the configuration export experience

  enhancementuiui-rewrite
  Feature

  IBM/mcp-context-forge#7422 · Filter by author a-effort opened on Nov 2, 2026
  1

  

• [FEATURE]: Export configuration from the web UI

  enhancementSHOULDtriageuiui-rewrite
  Feature

  IBM/mcp-context-forge#7421 · Filter by author a-effort opened on Nov 2, 2026

• [FEATURE]: Make configuration export complete and consistent

  apienhancementSHOULDtriageui-rewrite
  Feature

  IBM/mcp-context-forge#7420 · Filter by author a-effort opened on Nov 2, 2026

• [FEATURE]: Import configuration in the web UI

  enhancementtriageuiui-rewrite
  Feature

  IBM/mcp-context-forge#7419 · Filter by author a-effort opened on Nov 2, 2026

• [FEATURE]: Make configuration import correct and repeatable

  apienhancementsecuritytriageui-rewrite
  Feature

  IBM/mcp-context-forge#7418 · Filter by author a-effort opened on Nov 2, 2026
  1

• [BUG][AUTH]: API token usage_limits are stored but never enforced (and the check fails open)

  bugtriage
  IBM/mcp-context-forge#7417 · Filter by author fabiolauria92 opened on Nov 2, 2026
  2

• [FEATURE]: Client ID Metadata Documents (CIMD) for upstream OAuth registration

  enhancement
  IBM/mcp-context-forge#7412 · Filter by author madhu-mohan-jaishankar opened on Nov 2, 2026

• [FEATURE]:Environment-Aware Configuration Promotion for MCP Servers, Tools and Virtual Servers

  enhancementtriage
  IBM/mcp-context-forge#7408 · Filter by author Tissandier opened on Nov 2, 2026
  

• [BUG]: SSRF pinning dials only resolved_ips[0], so an outbound request fails when the peer listens on one address family

  IBM/mcp-context-forge#7407 · Filter by author ScarAnd opened on Nov 2, 2026

• [BUG]: ContextForge never propagates upstream 401/403 to the outer /rpc response

  IBM/mcp-context-forge#7401 · Filter by author k-jingyang opened on Oct 31, 2026
  1

• The oauth blocks in mcp-catalog.yml are not used at registration

  apibugoauth-oidc
  Bug

  IBM/mcp-context-forge#7400 · Filter by author a-effort opened on Oct 31, 2026

• [Bug] OAuth authorization failure message pushes down cards

  1.1-Phase-1bugui-rewrite
  Bug

  IBM/mcp-context-forge#7399 · Filter by author a-effort opened on Oct 30, 2026

• [BUG][UI-REWRITE]: Catalog server stays disabled after a successful OAuth authorization

  1.1-Phase-2bugfrontendui-rewrite
  Bug

  IBM/mcp-context-forge#7398 · Filter by author a-effort opened on Oct 30, 2026