Issues

• Harden tool argument sanitization against special property names

  enhancement
  platformatic/mcp#311 · Filter by author mcollina opened on Oct 15, 2026

• Add configurable limits for sessions and resource subscriptions

  enhancement
  platformatic/mcp#312 · Filter by author mcollina opened on Oct 15, 2026

• README Plugin Options list is missing several options

  platformatic/mcp#305 · Filter by author mcollina opened on Oct 15, 2026

• POST with an unknown or expired Mcp-Session-Id is not answered 404

  platformatic/mcp#304 · Filter by author mcollina opened on Oct 15, 2026

• URI templates with operators are listed but never readable, and template matching ignores specificity

  platformatic/mcp#303 · Filter by author mcollina opened on Oct 15, 2026

• Task options are not validated at registration: taskLeaseMs: 0 or taskDefaultTtlMs: NaN break every task

  platformatic/mcp#302 · Filter by author mcollina opened on Oct 15, 2026

• Malformed handler results are returned as successful (and cacheable) results

  platformatic/mcp#252 · Filter by author mcollina opened on Oct 11, 2026

• Design list_changed for multi-instance fleets and rolling redeploys

  platformatic/mcp#237 · Filter by author mcollina opened on Oct 10, 2026

• Plain JSON Schema tool inputs are not validated unless validateJsonSchemaInputs is set

  platformatic/mcp#217 · Filter by author mcollina opened on Oct 8, 2026

• validateJsonSchemaInputs coerces, defaults and strips tool arguments despite claiming to be non-mutating

  platformatic/mcp#211 · Filter by author mcollina opened on Oct 6, 2026
  1

• Origin validation is disabled unless allowedOrigins is configured

  platformatic/mcp#209 · Filter by author mcollina opened on Oct 6, 2026

• Validate token audience by default

  platformatic/mcp#208 · Filter by author mcollina opened on Oct 6, 2026
  1

• Make OAuth session token refresh functional end-to-end

  platformatic/mcp#146 · Filter by author getlarge opened on May 16, 2026
  2

• OpenAPI types break

  platformatic/mcp#72 · Filter by author prescottprue opened on Nov 20, 2025

• Provide externally-managed Redis client instance

  platformatic/mcp#59 · Filter by author Codesleuth opened on Oct 28, 2025

• Dependency Dashboard

  platformatic/mcp#5 · Filter by author renovate opened on Jul 15, 2025