Search results

vMCP: Load authz config from ConfigMap (policies + primaryUpstreamProvider)

authorization

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

kubernetesItems related to KubernetesItems related to Kubernetes

operator

vmcpVirtual MCP Server related issuesVirtual MCP Server related issues

Status: Open.

#5208 In stacklok/toolhive;

· tgrunnagle opened on May 6, 2026

[k8s Operator] MCPExternalAuthConfig: BearerToken support missing in kubernetes

authentication

bugSomething isn't workingSomething isn't working

kubernetesItems related to KubernetesItems related to Kubernetes

operator

Status: Open.

#5202 In stacklok/toolhive;

· snorlaX-sleeps opened on May 6, 2026

Expose explicit primaryUpstreamProvider for Cedar authz on VirtualMCPServer

auth

authorization

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

kubernetesItems related to KubernetesItems related to Kubernetes

operator

vmcpVirtual MCP Server related issuesVirtual MCP Server related issues

Status: Open.

#5197 In stacklok/toolhive;

· tgrunnagle opened on May 5, 2026

Embedded auth server should support RFC 8693 token exchange so agents can act on behalf of users

authentication

authorization

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

Status: Open.

#5194 In stacklok/toolhive;

· jhrozek opened on May 5, 2026

Webhook hardening follow-ups (post-#4564 review)

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

security

Status: Open.

#5193 In stacklok/toolhive;

· JAORMX opened on May 5, 2026

Persistent DCRCredentialStore: wire into EmbeddedAuthServer

auth

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

Status: Open.

#5185 In stacklok/toolhive;

· tgrunnagle opened on May 4, 2026

Persistent DCRCredentialStore: Redis backend

auth

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

Status: Open.

#5184 In stacklok/toolhive;

· tgrunnagle opened on May 4, 2026

Persistent DCRCredentialStore: types, interface, and in-memory backend

auth

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

Status: Open.

#5183 In stacklok/toolhive;

· tgrunnagle opened on May 4, 2026

Stdio MCP server gives up after sustained Docker daemon disruption

bugSomething isn't workingSomething isn't working

cliChanges that impact CLI functionalityChanges that impact CLI functionality

goPull requests that update go codePull requests that update go code

Status: Open.

#5171 In stacklok/toolhive;

· gkatz2 opened on May 3, 2026

Token refresh treats transient 4xx as permanent auth failures

authentication

bugSomething isn't workingSomething isn't working

goPull requests that update go codePull requests that update go code

oauth

Status: Open.

#5169 In stacklok/toolhive;

· gkatz2 opened on May 3, 2026

vMCP: graceful degradation when one upstream IdP fails in multi-upstream auth

auth

enhancementNew feature or requestNew feature or request

vmcpVirtual MCP Server related issuesVirtual MCP Server related issues

Status: Open.

#5162 In stacklok/toolhive;

· tgrunnagle opened on May 1, 2026

Recognise identityFromToken in synthesis-mode detection

auth

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

kubernetesItems related to KubernetesItems related to Kubernetes

operator

Status: Open.

#5159 In stacklok/toolhive;

· jhrozek opened on May 1, 2026