List view

[BUG][SSE]: SSE transport incorrect endpoint and data parsing

bugSomething isn't workingSomething isn't working

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

Status: Open.

Bug

#1595 In IBM/mcp-context-forge;

· crivetimihai opened on Dec 13, 2025

[BUG][AUTH]: Permission system inconsistencies - Undefined permissions in use

bugSomething isn't workingSomething isn't working

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

Status: Open.

Bug

#1672 In IBM/mcp-context-forge;

· crivetimihai opened on Dec 20, 2025

[BUG][AUTH]: Multi-team users denied access to non-primary teams and cannot see public resources from other teams

bugSomething isn't workingSomething isn't working

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

rbacRole-based Access ControlRole-based Access Control

securityImproves securityImproves security

Status: Open.

Bug

#2189 In IBM/mcp-context-forge;

· childrenofaqsa opened on Jan 19, 2026

Optimize_Database_Session_Creation_and_Management

Status: Open (in progress).

IBM/mcp-context-forgenumber 2202

#2202 In IBM/mcp-context-forge;

· Nayana-R-Gowda opened on Jan 20, 2026

Toolops llm settings related changes

Status: Open (in progress).

IBM/mcp-context-forgenumber 2258

#2258 In IBM/mcp-context-forge;

· Jay-IRL opened on Jan 21, 2026

Improve SQLAlchemy Instrumentation Thread Safety and Add Instrumentation Queue

blockedBlocked by some other predecessor issue or PR. See notes.Blocked by some other predecessor issue or PR. See notes.

Status: Open (in progress).

IBM/mcp-context-forgenumber 2327

#2327 In IBM/mcp-context-forge;

· rakdutta opened on Jan 22, 2026

Optimize Database Migration Performance

Status: Open (in progress).

IBM/mcp-context-forgenumber 2328

#2328 In IBM/mcp-context-forge;

· Nayana-R-Gowda opened on Jan 22, 2026

Add loading of missing js libs to download-cdn-assets.sh

blockedBlocked by some other predecessor issue or PR. See notes.Blocked by some other predecessor issue or PR. See notes.

Status: Open (in progress).

IBM/mcp-context-forgenumber 2354

#2354 In IBM/mcp-context-forge;

· nex2hex opened on Jan 23, 2026

[TESTING][SECURITY]: RBAC manual test plan (visibility, teams, token scope)

documentationImprovements or additions to documentationImprovements or additions to documentation

epicLarge feature spanning multiple issuesLarge feature spanning multiple issues

manual-testingManual testing / test planning issuesManual testing / test planning issues

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

rbacRole-based Access ControlRole-based Access Control

securityImproves securityImproves security

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2388 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Token scoping middleware manual test plan (server ID, IP, time, permissions)

documentationImprovements or additions to documentationImprovements or additions to documentation

manual-testingManual testing / test planning issuesManual testing / test planning issues

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

securityImproves securityImproves security

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2393 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Rate limiting manual test plan (user, tenant, tool limits, window algorithm)

documentationImprovements or additions to documentationImprovements or additions to documentation

manual-testingManual testing / test planning issuesManual testing / test planning issues

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

securityImproves securityImproves security

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2397 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Input validation manual test plan (path traversal, injection, XSS, ReDoS)

documentationImprovements or additions to documentationImprovements or additions to documentation

manual-testingManual testing / test planning issuesManual testing / test planning issues

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

securityImproves securityImproves security

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2398 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Audit trail manual test plan (CRUD logging, compliance, data classification)

documentationImprovements or additions to documentationImprovements or additions to documentation

manual-testingManual testing / test planning issuesManual testing / test planning issues

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

securityImproves securityImproves security

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2403 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Encryption and secrets manual test plan (Argon2, Fernet, key derivation)

documentationImprovements or additions to documentationImprovements or additions to documentation

manual-testingManual testing / test planning issuesManual testing / test planning issues

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

securityImproves securityImproves security

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2405 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: SSRF prevention manual test plan (URL validation, allowlists, internal network protection)

documentationImprovements or additions to documentationImprovements or additions to documentation

manual-testingManual testing / test planning issuesManual testing / test planning issues

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

securityImproves securityImproves security

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2408 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: CSRF protection manual test plan (tokens, SameSite cookies, origin validation)

documentationImprovements or additions to documentationImprovements or additions to documentation

manual-testingManual testing / test planning issuesManual testing / test planning issues

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

securityImproves securityImproves security

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2409 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Session management manual test plan (fixation, hijacking, timeout, concurrent sessions)

documentationImprovements or additions to documentationImprovements or additions to documentation

manual-testingManual testing / test planning issuesManual testing / test planning issues

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

securityImproves securityImproves security

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2410 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Error handling manual test plan (stack traces, debug info, verbose errors, information disclosure)

documentationImprovements or additions to documentationImprovements or additions to documentation

manual-testingManual testing / test planning issuesManual testing / test planning issues

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

securityImproves securityImproves security

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2411 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: API security manual test plan (mass assignment, BOLA, parameter pollution, OpenAPI validation)

documentationImprovements or additions to documentationImprovements or additions to documentation

manual-testingManual testing / test planning issuesManual testing / test planning issues

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

securityImproves securityImproves security

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2412 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Protocol-level security manual test plan (WebSocket/SSE abuse, connection management, HTTP smuggling)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

securityImproves securityImproves security

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2414 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Serialization security manual test plan (XML bombs, YAML deserialization, recursive JSON)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

securityImproves securityImproves security

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2415 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Encoding/Unicode security manual test plan (homograph attacks, null byte injection, normalization bypass)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

securityImproves securityImproves security

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2416 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: File upload security manual test plan (malicious files, size limits, MIME validation, zip bombs)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

securityImproves securityImproves security

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2417 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[BUG][UI]: Browser autocomplete incorrectly fills fields with saved credentials (UX issue)

bugSomething isn't workingSomething isn't working

frontendFrontend development (HTML, CSS, JavaScript)Frontend development (HTML, CSS, JavaScript)

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

uiUser InterfaceUser Interface

Status: Open.

Bug

#2626 In IBM/mcp-context-forge;

· crivetimihai opened on Feb 1, 2026

[BUG][AUTH]: Account lockout issues - counter persists after expiry, no user notification, no admin unlock capability

bugSomething isn't workingSomething isn't working

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

pythonPython / backend development (FastAPI)Python / backend development (FastAPI)

securityImproves securityImproves security

Status: Open.

Bug

#2628 In IBM/mcp-context-forge;

· crivetimihai opened on Feb 1, 2026