All pull requests

Pull requests

• fix: redact configured secrets in exception messages

  #7402·sophia486 opened Oct 31, 2026·

  ·
  1

• fix(a2a): send a client-credentials token to OAuth agents

  #7391·marekdano opened Oct 30, 2026Collaborator·

  ·
  1

  

• fix(gateways): require gateways.update and ownership to test with stored credentials

  #7390·msureshkumar88 opened Oct 30, 2026Collaborator·7 of 8 tasks·

  ·

• fix(auth): apply token scopes to the bearer credential the route authenticates

  #7389·msureshkumar88 opened Oct 30, 2026Collaborator·4 of 5 tasks·

  ·

• fix(llm): require llm.read on GET /llm/gateway/models

  bugsecurity
  #7388·msureshkumar88 opened Oct 30, 2026Collaborator·7 of 9 tasks·

  ·

• fix(tools): percent-encode REST URL template values

  #7387·msureshkumar88 opened Oct 30, 2026Collaborator·9 of 11 tasks·

  ·

• feat(oauth): add GET /oauth/token/{gateway_id} access token retrieval endpoint

  work-queue
  #7381·jonpspri opened Oct 29, 2026Collaborator·6 of 10 tasks·

  ·
  1

  2

  

• chore: default tests to rstest on Python 3.14

  #7379·lucarlig opened Oct 29, 2026Collaborator·

  ·

• feat(a2a): store the Agent Card as fetched when registering an agent

  #7378·marekdano opened Oct 29, 2026Collaborator·

  ·
  

• feat(a2a): add POST /a2a/fetch-card to read an Agent Card before registration

  #7377·marekdano opened Oct 29, 2026Collaborator·

  ·
  

• feat(a2a): add a route to continue a task with a follow-up message

  #7374·marekdano opened Oct 29, 2026Collaborator·3 tasks done·

  ·
  1

  1

  

• chore(deps): bump langgraph from 1.2.12 to 1.2.14

  dependenciespython:uv
  #7373·dependabot[bot] opened Oct 29, 2026Bot·

  ·

• feat: add pod extension points to the mcp-stack gateway (command, extra containers, volumes)

  #7371·healdropper opened Oct 29, 2026·

  ·

• feat(a2a): return a typed 404 when A2A is disabled and expose feature…

  #7368·marekdano opened Oct 29, 2026Collaborator·

  ·
  1

  

• feat(a2a): add GET /v1/a2a/metrics scoped to visible agents

  #7363·marekdano opened Oct 28, 2026Collaborator·

  ·
  1

  

• feat(a2a): add POST /v1/a2a/{agent_id}/test endpoint

  #7362·marekdano opened Oct 28, 2026Collaborator·

  ·
  1

  2

  

• chore(deps-dev): bump authlib from 1.8.0 to 1.9.1

  dependenciespython:uv
  #7357·dependabot[bot] opened Oct 28, 2026Bot·

  ·

• feat: validate stored OAuth MCP connections after authorization

  #7343·vishu-bh opened Oct 27, 2026Collaborator·9 of 14 tasks·

  ·
  1

  1

  

• Fix/upstream auth header credential override

  #7341·prakhar-singh1928 opened Oct 27, 2026Collaborator·7 of 15 tasks·

  ·
  2

  

• fix(admin): add resource and multi-issuer fields to server OAuth forms, stop Edit erasing API-set values

  #7339·choksi2212 opened Oct 25, 2026·

  ·
  1

• feat(transport): make the Python transport body-size limit configurable

  #7337·DawnofGenX opened Oct 24, 2026·10 of 15 tasks·

  ·
  1

• fix(ui): use delegated event handlers for search and password inputs to comply with CSP (#7283)

  #7336·chiragjangiir opened Oct 24, 2026·

  ·
  1

• fix(build): stop compose-pull from pulling locally built images

  #7335·DawnofGenX opened Oct 23, 2026·9 of 15 tasks·

  ·
  1

• Load LLM Chat tools with the MCP SDK client instead of langchain

  #7332·madhu-mohan-jaishankar opened Oct 23, 2026Collaborator·

  ·
  1

  7

  

• fix: bind webhook HMAC to timestamp and honor per-gateway identity propagation

  #7329·Lang-Akshay opened Oct 23, 2026Collaborator·

  ·