All pull requests

Pull requests

• Rate limit middleware updates

  #7213·madhu-mohan-jaishankar opened Oct 12, 2026Collaborator·

  ·

• fix: stamp team-scoped audit events with persisted resource teams

  #7212·ja8zyjits opened Oct 12, 2026Collaborator·

  ·

• fix(api): generate A2A 1.0-shaped agent cards

  #7209·marekdano opened Oct 12, 2026Collaborator·1 of 5 tasks·

  ·
  1

  

• Feat/prompt error translation

  #7204·madhu-mohan-jaishankar opened Oct 12, 2026Collaborator·2/2·

  ·
  1

  21

  

• feat(reverse-proxy): negotiate MCP protocol era and inject modern version meta

  #7203·jonpspri opened Oct 12, 2026Collaborator·5/5·

  ·

• ci: add Mend SCA CLI pre-scan setup and path exclusions

  #7202·brian-hussey opened Oct 12, 2026Member·

  ·

• test: add ContextForge performance cluster smoke test

  #7198·gandhipratik203 opened Oct 11, 2026Collaborator·

  ·

• fix(security): honor ssrf_allow_localhost for OAuth HTTP guards

  #7196·dcaayushd opened Oct 10, 2026·8 of 15 tasks·

  ·
  1

• chore(db): add non-unique index on tools.name (#7044)

  #7195·noesis-bot opened Oct 10, 2026·

  ·
  1

  1

• fix(audit): write security_events and permission_audit_log for plugin blocks and RBAC denials

  #7194·Aftabbs opened Oct 10, 2026·

  ·
  1

• fix(oauth): avoid SSRF validation on redirect_uri

  #7193·Sahas2711 opened Oct 10, 2026·

  ·
  1

  1

• fix(auth): propagate end-user identity for IdP access tokens on /mcp

  #7192·janezj opened Oct 9, 2026·8 of 9 tasks·

  ·

• feat: adopt per-user MCP server rate limiting

  #7191·vishu-bh opened Oct 9, 2026Collaborator·11 of 15 tasks·

  ·
  1

  

• docs: add RFC 9728 compliance page to architecture navigation

  documentation
  #7188·jonpspri opened Oct 9, 2026Collaborator·5 of 11 tasks·

  ·
  1

• OAuth 2.0 MCP Server is marked as authorized without completing authentication

  enhancementicawork-queue
  #7185·waghi opened Oct 9, 2026·3 of 15 tasks·

  ·
  2

  

• test: validate pre-provisioned SSO auth and document onboarding

  #7183·gandhipratik203 opened Oct 8, 2026Collaborator·

  ·
  2

  3

• feat(api): add public GET /v1/a2a/{agent_id}/card route

  #7182·marekdano opened Oct 8, 2026Collaborator·6 of 10 tasks·

  ·
  1

  

• feat(api): accept mcp_server_id and virtual_server as product-terminology aliases

  #7179·marekdano opened Oct 8, 2026Collaborator·9 of 14 tasks·

  ·
  

• fix(admin): list joinable public teams for team-scoped tokens

  #7178·abhishekacharya200 opened Oct 8, 2026·7 tasks done·

  ·
  1

• [Chore] Pytest ci declutter

  #7177·ja8zyjits opened Oct 8, 2026Collaborator·4 of 13 tasks·

  ·

• fix(vault): key the per-user token path on gateway_id

  enhancementicawork-queue
  #7176·shoummu1 opened Oct 8, 2026Collaborator·5 of 10 tasks·

  ·

• chore(deps): bump werkzeug from 3.1.8 to 3.1.9

  dependenciespython:uv
  #7175·dependabot[bot] opened Oct 8, 2026Bot·

  ·

• InstanaTracer.start_as_current_span() got an unexpected keyword argument context

  bugicawork-queue
  #7174·Nayana-R-Gowda opened Oct 8, 2026Collaborator·

  ·
  1

  1

  

• [BUG]: Preserve gateway catalogs during deferred OAuth discovery

  #7173·jstar0 opened Oct 7, 2026Contributor·

  ·
  1

  1

• fix: mask A2A/gateway credentials on read and reject ambiguous auth updates

  #7172·marekdano opened Oct 7, 2026Collaborator·

  ·
  1