List view

[BUG]: Langchain and langgraph missing ghcr.io/ibm/mcp-context-forge:latest

bugSomething isn't workingSomething isn't working

devopsDevOps activities (containers, automation, deployment, makefiles, etc)DevOps activities (containers, automation, deployment, makefiles, etc)

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

Status: Open.

Bug

#3913 In IBM/mcp-context-forge;

· majerus1223 opened on Mar 30, 2026

feat: add Redis Cluster support via REDIS_CLUSTER_MODE setting

enhancementNew feature or requestNew feature or request

performancePerformance related itemsPerformance related items

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

Status: Open (in progress).

IBM/mcp-context-forgenumber 3890

#3890 In IBM/mcp-context-forge;

· bebakouma opened on Mar 27, 2026

[TESTING][UPGRADE]: Version Upgrades, Database Migrations, and Rollback Procedures

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2474 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[CHORE]: Manual security testing plan and template for release validation and production deployments

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

cicdIssue with CI/CD process (GitHub Actions, scaffolding)Issue with CI/CD process (GitHub Actions, scaffolding)

database

devopsDevOps activities (containers, automation, deployment, makefiles, etc)DevOps activities (containers, automation, deployment, makefiles, etc)

help wantedExtra attention is neededExtra attention is needed

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Bug

#260 In IBM/mcp-context-forge;

· crivetimihai opened on Jul 6, 2025

[TESTING][SECURITY]: RBAC manual test plan (visibility, teams, token scope)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

rbacRole-based Access ControlRole-based Access Control

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2388 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Core authentication manual test plan (JWT, Basic Auth, API tokens, email/password)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Feature

#2390 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Token scoping middleware manual test plan (server ID, IP, time, permissions)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2393 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Audit trail manual test plan (CRUD logging, compliance, data classification)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2403 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: SSRF prevention manual test plan (URL validation, allowlists, internal network protection)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2408 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Session management manual test plan (fixation, hijacking, timeout, concurrent sessions)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2410 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Error handling manual test plan (stack traces, debug info, verbose errors, information disclosure)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2411 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: API security manual test plan (mass assignment, BOLA, parameter pollution, OpenAPI validation)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2412 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Resource exhaustion / DoS prevention manual test plan (memory bombs, connection exhaustion, slowloris, CPU exhaustion)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2413 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Protocol-level security manual test plan (WebSocket/SSE abuse, connection management, HTTP smuggling)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2414 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Serialization security manual test plan (XML bombs, YAML deserialization, recursive JSON)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2415 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: Encoding/Unicode security manual test plan (homograph attacks, null byte injection, normalization bypass)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2416 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[TESTING][SECURITY]: File upload security manual test plan (malicious files, size limits, MIME validation, zip bombs)

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

manual-testingManual testing / test planning issuesManual testing / test planning issues

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#2417 In IBM/mcp-context-forge;

· crivetimihai opened on Jan 25, 2026

[CHORE]: SAST (Semgrep) and DAST (OWASP ZAP) automated security testing Makefile targets and GitHub Actions

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

cicdIssue with CI/CD process (GitHub Actions, scaffolding)Issue with CI/CD process (GitHub Actions, scaffolding)

database

devopsDevOps activities (containers, automation, deployment, makefiles, etc)DevOps activities (containers, automation, deployment, makefiles, etc)

help wantedExtra attention is neededExtra attention is needed

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Bug

#259 In IBM/mcp-context-forge;

· crivetimihai opened on Jul 6, 2025

[DOCS]: GA Documentation Review & End-to-End Validation Audit

documentationImprovements or additions to documentationImprovements or additions to documentation

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

testingTesting (unit, e2e, manual, automated, etc)Testing (unit, e2e, manual, automated, etc)

Status: Open.

Task

#264 In IBM/mcp-context-forge;

· crivetimihai opened on Jul 6, 2025

[CHORE]: Achieve zero flagged SonarQube issues

choreLinting, formatting, dependency hygiene, or project maintenance choresLinting, formatting, dependency hygiene, or project maintenance chores

cicdIssue with CI/CD process (GitHub Actions, scaffolding)Issue with CI/CD process (GitHub Actions, scaffolding)

devopsDevOps activities (containers, automation, deployment, makefiles, etc)DevOps activities (containers, automation, deployment, makefiles, etc)

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

securityImproves securityImproves security

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

Status: Open.

Bug

#212 In IBM/mcp-context-forge;

· crivetimihai opened on Jul 2, 2025

[BUG][DB]: bootstrap_db crashes on alembic version mismatch when pgdata volume persists across image rebuilds

bugSomething isn't workingSomething isn't working

dbDatabase and migrationsDatabase and migrations

readyValidated, ready-to-work-on itemsValidated, ready-to-work-on items

SHOULDP2: Important but not vital; high-value items that are not crucial for the immediate releaseP2: Important but not vital; high-value items that are not crucial for the immediate release

Status: Open.

Bug

#3512 In IBM/mcp-context-forge;

· crivetimihai opened on Mar 6, 2026

SSO (Entra ID) users cannot edit gateways/servers in admin UI — 'invalid team name' error despite ["*"] effective permissions

apiREST API Related itemREST API Related item

bugSomething isn't workingSomething isn't working

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

rbacRole-based Access ControlRole-based Access Control

release-fixCritical bugfix required for the releaseCritical bugfix required for the release

Status: Open.

Bug

#4070 In IBM/mcp-context-forge;

· btbinaryjanitor opened on Apr 7, 2026

fix(rbac): add database-backed admin bypass for visibility filtering

apiREST API Related itemREST API Related item

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

rbacRole-based Access ControlRole-based Access Control

release-fixCritical bugfix required for the releaseCritical bugfix required for the release

Status: Open (in progress).

IBM/mcp-context-forgenumber 4107

#4107 In IBM/mcp-context-forge;

· bogdanmariusc10 opened on Apr 9, 2026

feat(tools): Elicitation pass-through implementation with session routing and observability

enhancementNew feature or requestNew feature or request

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

wxowxo integrationwxo integration

Status: Open (in progress).

IBM/mcp-context-forgenumber 4091

#4091 In IBM/mcp-context-forge;

· bogdanmariusc10 opened on Apr 8, 2026

fix(sso): SSO users with platform_admin role can now access teams in admin UI

apiREST API Related itemREST API Related item

MUSTP1: Non-negotiable, critical requirements without which the product is non-functional or unsafeP1: Non-negotiable, critical requirements without which the product is non-functional or unsafe

rbacRole-based Access ControlRole-based Access Control

Status: Open (in progress).

IBM/mcp-context-forgenumber 4080

#4080 In IBM/mcp-context-forge;

· bogdanmariusc10 opened on Apr 8, 2026