-
Notifications
You must be signed in to change notification settings - Fork 2.4k
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
OpenTrustBench security assessment for fastmcp
invalidIssue lacks info, is off-topic, or doesn't make sense. Often LLM-generated spam.Issue lacks info, is off-topic, or doesn't make sense. Often LLM-generated spam.Status: Open.#5177 In PrefectHQ/fastmcp;Resource template with a non-ASCII or space literal is listed but can never be read
bugSomething isn't working. Reports of errors, unexpected behavior, or broken functionality.Something isn't working. Reports of errors, unexpected behavior, or broken functionality.serverRelated to FastMCP server implementation or server-side functionality.Related to FastMCP server implementation or server-side functionality.Status: Open.#5166 In PrefectHQ/fastmcp;ClientGroup.list_tools() turns child cancellation into TypeError: 'NoneType' object is not iterable
bugSomething isn't working. Reports of errors, unexpected behavior, or broken functionality.Something isn't working. Reports of errors, unexpected behavior, or broken functionality.clientRelated to the FastMCP client SDK or client-side functionality.Related to the FastMCP client SDK or client-side functionality.Status: Open.#5160 In PrefectHQ/fastmcp;BM25 search returns an old input schema after registering a newer tool version
bugSomething isn't working. Reports of errors, unexpected behavior, or broken functionality.Something isn't working. Reports of errors, unexpected behavior, or broken functionality.serverRelated to FastMCP server implementation or server-side functionality.Related to FastMCP server implementation or server-side functionality.Status: Open.#5152 In PrefectHQ/fastmcp;ssrf_safe_fetchtries resolved addresses in a random, per-process orderbugSomething isn't working. Reports of errors, unexpected behavior, or broken functionality.Something isn't working. Reports of errors, unexpected behavior, or broken functionality.Status: Open.#5151 In PrefectHQ/fastmcp;- Status: Open.#5150 In PrefectHQ/fastmcp;
GoogleTokenVerifier sends the access token in the tokeninfo URL, so HTTP client INFO logs expose it
authRelated to authentication (Bearer, JWT, OAuth, WorkOS) for client or server.Related to authentication (Bearer, JWT, OAuth, WorkOS) for client or server.bugSomething isn't working. Reports of errors, unexpected behavior, or broken functionality.Something isn't working. Reports of errors, unexpected behavior, or broken functionality.securitySecurity fixes: input validation, SSRF/LFI prevention, auth hardening, injection defenses.Security fixes: input validation, SSRF/LFI prevention, auth hardening, injection defenses.Status: Open.#5145 In PrefectHQ/fastmcp;Tasks: a poll refreshes the routing keys and the snapshot, but not the stored arguments
bugSomething isn't working. Reports of errors, unexpected behavior, or broken functionality.Something isn't working. Reports of errors, unexpected behavior, or broken functionality.serverRelated to FastMCP server implementation or server-side functionality.Related to FastMCP server implementation or server-side functionality.Status: Open.#5143 In PrefectHQ/fastmcp;Consider linking Hexum hosted MCP for smaller coding-agent context
invalidIssue lacks info, is off-topic, or doesn't make sense. Often LLM-generated spam.Issue lacks info, is off-topic, or doesn't make sense. Often LLM-generated spam.Status: Open.#5142 In PrefectHQ/fastmcp;Data-backed File URIs misinterpret reserved characters in names
bugSomething isn't working. Reports of errors, unexpected behavior, or broken functionality.Something isn't working. Reports of errors, unexpected behavior, or broken functionality.Status: Open.#5137 In PrefectHQ/fastmcp;FileSystemProvider should expose original discovery failures after initialization
enhancementImprovement to existing functionality. For issues and smaller PR improvements.Improvement to existing functionality. For issues and smaller PR improvements.providerRelated to the FastMCP Provider classRelated to the FastMCP Provider classStatus: Open.#5135 In PrefectHQ/fastmcp;Context.session_id changes on every tool call in 4.x, breaking session state
bugSomething isn't working. Reports of errors, unexpected behavior, or broken functionality.Something isn't working. Reports of errors, unexpected behavior, or broken functionality.serverRelated to FastMCP server implementation or server-side functionality.Related to FastMCP server implementation or server-side functionality.Status: Open.#5134 In PrefectHQ/fastmcp;