Issues

• The oauth blocks in mcp-catalog.yml are not used at registration

  apibugoauth-oidc
  Bug

  IBM/mcp-context-forge#7400 · Filter by author a-effort opened on Oct 31, 2026

• [Bug] OAuth authorization failure message pushes down cards

  1.1-Phase-1bugui-rewrite
  Bug

  IBM/mcp-context-forge#7399 · Filter by author a-effort opened on Oct 30, 2026

• [BUG][UI-REWRITE]: Catalog server stays disabled after a successful OAuth authorization

  1.1-Phase-2bugfrontendui-rewrite
  Bug

  IBM/mcp-context-forge#7398 · Filter by author a-effort opened on Oct 30, 2026

• [UI-REWRITE]: A provider error during authorization is indistinguishable from the user closing the popup

  1.1-Phase-2bugfrontendoauth-oidcui-rewrite
  Bug

  IBM/mcp-context-forge#7397 · Filter by author a-effort opened on Oct 30, 2026

• [BUG]: Client registrations cannot be removed from the provider, and expired ones are reused

  1.1-Phase-2apibugoauth-oidcsecurity
  Bug

  IBM/mcp-context-forge#7396 · Filter by author a-effort opened on Oct 30, 2026

• [BUG][SECURITY]: Client registration inside GET /oauth/authorize/{gateway_id} has no authorization check

  1.1-Phase-1apibugoauth-oidcsecurity
  Bug

  IBM/mcp-context-forge#7395 · Filter by author a-effort opened on Oct 30, 2026

• [BUG][SECURITY]: Catalog registration accepts redirect_uri from the request body and registers it at the provider

  1.1-Phase-1apibugoauth-oidcsecurity
  Bug

  IBM/mcp-context-forge#7394 · Filter by author a-effort opened on Oct 30, 2026

• [BUG][UI-REWRITE]: Catalog OAuth form requires credentials that most catalog providers issue themselves

  1.1-Phase-1bugfrontendoauth-oidcui-rewrite
  Bug

  IBM/mcp-context-forge#7393 · Filter by author a-effort opened on Oct 30, 2026

• [FEATURE]: Type the result of A2A invoke and jsonrpc responses

  a2aagentsapibugenhancementtriage
  IBM/mcp-context-forge#7392 · Filter by author marekdano opened on Oct 30, 2026

• [BUG]: LLM proxy drops tools and tool calls for Anthropic models

  IBM/mcp-context-forge#7386 · Filter by author swf1996120 opened on Oct 30, 2026

• [BUG]: LLM proxy sends default temperature 0.7 to Claude models that reject it

  IBM/mcp-context-forge#7385 · Filter by author swf1996120 opened on Oct 30, 2026

• [BUG]: A trailing slash in an agent endpoint URL overrides the protocol binding

  a2abug
  IBM/mcp-context-forge#7383 · Filter by author a-effort opened on Oct 30, 2026

• [BUG]: A2A agents registered with OAuth 2.0 are invoked without credentials

  a2abugoauth-oidc
  IBM/mcp-context-forge#7382 · Filter by author a-effort opened on Oct 30, 2026
  

• Anthropic chat provider and summarizer plugin default to claude-3-5-sonnet, which Anthropic retired

  IBM/mcp-context-forge#7375 · Filter by author pcbeingused333 opened on Oct 29, 2026

• [BUG] [UI-REWRITE]: A refresh on an unauthorized MCP server shows the backend's raw message

  bugoauth-oidcuiui-rewrite
  Bug

  IBM/mcp-context-forge#7367 · Filter by author a-effort opened on Oct 28, 2026

• [BUG] MCP Servers: OAuth authorizing stuck with no way to retry

  bugSHOULDtriageui-rewrite
  Bug

  IBM/mcp-context-forge#7366 · Filter by author a-effort opened on Oct 28, 2026
  

• [FEATURE]: Retain server authorization scopes during OAuth endpoint discovery

  apienhancementoauth-oidctriage
  Story

  IBM/mcp-context-forge#7365 · Filter by author a-effort opened on Oct 28, 2026

• [BUG]: Health check marks a 401 or 403 as unreachable for every auth type except authorization_code

  apibugtriage
  Bug

  IBM/mcp-context-forge#7364 · Filter by author a-effort opened on Oct 28, 2026

• [BUG]: OAuth token issuer validation blocks tool fetch when the MCP server is its own authorization server but issues tokens signed by an upstream IdP (iss differs from AS issuer)

  icaoauth-oidcsecuritySHOULD
  IBM/mcp-context-forge#7360 · Filter by author EimantasPelikis opened on Oct 28, 2026
  1

  

• [CHORE]: Remove Go license scan from license_checker.py and verify no Go code remains

  choretriage
  IBM/mcp-context-forge#7355 · Filter by author jonpspri opened on Oct 28, 2026
  

• [UI-REWRITE]: Add a Try it tab to the agent details panel

  1.1-Phase-1a2aagentsenhancementSHOULDui-rewrite
  Feature

  IBM/mcp-context-forge#7353 · Filter by author a-effort opened on Oct 28, 2026

• [UI-REWRITE]: Edit an agent

  1.1-Phase-1a2aagentsenhancementSHOULDui-rewrite
  IBM/mcp-context-forge#7352 · Filter by author a-effort opened on Oct 28, 2026

• [UI-REWRITE]: Rework the agent card body

  1.1-Phase-1a2aagentsenhancementSHOULDui-rewrite
  IBM/mcp-context-forge#7351 · Filter by author a-effort opened on Oct 27, 2026
  

• [UI-REWRITE]: Add an agent manually, for agents that publish no Agent Card

  1.1-Phase-1a2aagentsenhancementSHOULDui-rewrite
  IBM/mcp-context-forge#7350 · Filter by author a-effort opened on Oct 27, 2026
  

• [API]: Move nested agent skills out from capabilities

  1.1-Phase-1a2aagentsapienhancementSHOULDui-rewrite
  IBM/mcp-context-forge#7349 · Filter by author a-effort opened on Oct 27, 2026
  1