Issues

• Cached upstream DCR registration never recovers after the upstream evicts it

  bugneeds-triage
  stacklok/toolhive#6821 · Filter by author peppescg opened on Oct 14, 2026
  1

  

• Legacy list path still fails the whole page on one undecodable item

  needs-triage
  stacklok/toolhive#6814 · Filter by author reyortiz3 opened on Oct 13, 2026

• Remote streamable-http proxy never closes the 202 response to notifications/initialized (Claude Code CONNECT_TIMEOUT)

  needs-triage
  stacklok/toolhive#6811 · Filter by author SalvaGuillo opened on Oct 13, 2026
  2

  

• Reject request bodies on non-POST methods in the MCP parser

  needs-triage
  stacklok/toolhive#6805 · Filter by author peppescg opened on Oct 11, 2026
  

• No way to forward a static Authorization header to a local container-backed MCP server (SSE readiness probe always 401)

  needs-triage
  stacklok/toolhive#6798 · Filter by author CyberT33N opened on Oct 11, 2026
  1

• thv run silently starts a workload without a required registry environment variable when the prompted value contains a space

  needs-triage
  stacklok/toolhive#6780 · Filter by author feiiiiii5 opened on Oct 10, 2026

• vMCP: session identity binding is not enforced for tools/list (and other list methods)

  needs-triage
  stacklok/toolhive#6779 · Filter by author nilsberberich opened on Oct 10, 2026
  1

• vMCP: Terminate() retains backend connections in the node-local cache until eviction

  needs-triage
  stacklok/toolhive#6762 · Filter by author hellouz818 opened on Oct 8, 2026
  5

  

• GET .../skills answers 200 [] when the registry is unreachable or the token is revoked

  needs-triage
  stacklok/toolhive#6752 · Filter by author feiiiiii5 opened on Oct 5, 2026
  

• proxyrunner support for contacting oauth server through https_proxy

  kubernetesneeds-triage
  stacklok/toolhive#6745 · Filter by author gberche-orange opened on Oct 2, 2026
  4

• MCPServerEntry response headers get swallowed by VirtualMCPServer

  kubernetes
  stacklok/toolhive#6743 · Filter by author JeremiasRy opened on Oct 2, 2026
  1

  

• multi_valued_claims in MCPAuthzConfig is silently ignored for VirtualMCPServer

  bugneeds-triage
  stacklok/toolhive#6737 · Filter by author ngocketit opened on Oct 1, 2026
  3

• Standalone Docker runtime: support read-only root filesystem for MCP workloads

  needs-triage
  stacklok/toolhive#6729 · Filter by author iambrazooka-stack opened on Sep 28, 2026

• MCPRemoteProxy reports Ready from pod phase alone, so a crash-looping proxy is published as healthy

  stacklok/toolhive#6726 · Filter by author feiiiiii5 opened on Sep 27, 2026
  4

• Audit records outcome=success for JSON-RPC error bodies over 512 bytes

  stacklok/toolhive#6720 · Filter by author feiiiiii5 opened on Sep 26, 2026
  3

  

• lockfile: CleanupAll/CleanupStaleLocks still unlock before unlink

  needs-triage
  stacklok/toolhive#6713 · Filter by author jhrozek opened on Sep 25, 2026
  3

• v0.49.0 vmcp: health probe hangs on the streamable proxy's empty SSE response to server/discover; Ready stuck False

  needs-triage
  stacklok/toolhive#6687 · Filter by author lightsabit opened on Sep 18, 2026
  2

• proxyrunner tool-filter middleware strips SEP-2322 Modern envelope from tools/list, breaking vMCP health checks

  stacklok/toolhive#6684 · Filter by author soulwhisper opened on Sep 18, 2026
  5

  

• MCPRemoteProxy + embeddedAuthServer: upstreamswap does not inject the stored per-user upstream token; the AS's own JWT is forwarded to the remote MCP (v0.49.0)

  bug
  stacklok/toolhive#6681 · Filter by author tissoni opened on Sep 17, 2026
  1

• Add a group-aware UpstreamFilter implementation for the embedded auth server

  stacklok/toolhive#6675 · Filter by author hellouz818 opened on Sep 17, 2026
  7

  

• HttpClientBuilder.Build() ignores HTTP(S)_PROXY (auth-server OAuth/DCR calls bypass forward proxy)

  stacklok/toolhive#6671 · Filter by author schonmann opened on Sep 16, 2026
  2

  

• Use the pinned provider's id_token when its access token is opaque

  needs-triage
  stacklok/toolhive#6655 · Filter by author rdimitrov opened on Sep 14, 2026
  2

• Define an optional export contract for signed authorization audit records

  needs-triage
  stacklok/toolhive#6651 · Filter by author jagmarques opened on Sep 13, 2026

• E2E coverage for the cosign key-pair signing path (skills and plugins)

  needs-triageskillstesting
  Chore 🧹

  stacklok/toolhive#6642 · Filter by author samuv opened on Sep 11, 2026
  1

• uvx:// protocol-scheme container for a Python/FastMCP stdio server restarts in a loop (exit 0), while npx:// containers work fine

  bug
  stacklok/toolhive#6634 · Filter by author S76-A opened on Sep 10, 2026
  2