Issues

• authserver: let embedders validate refresh-token grants, and type upstream refresh rejections

  stacklok/toolhive#6901 · Filter by author tgrunnagle opened on Oct 21, 2026
  

• Emit sub_id (RFC 9493) with the user's upstream identity in access tokens

  needs-triage
  stacklok/toolhive#6900 · Filter by author jhrozek opened on Oct 21, 2026

• Pluggable actor-token validation at ID-JAG issuance

  needs-triage
  stacklok/toolhive#6899 · Filter by author jhrozek opened on Oct 21, 2026

• ID-JAG issuance through token exchange

  needs-triage
  stacklok/toolhive#6898 · Filter by author jhrozek opened on Oct 21, 2026

• Session refresh tokens through token exchange

  needs-triage
  stacklok/toolhive#6897 · Filter by author jhrozek opened on Oct 21, 2026

• Schedule refresh tokens through token exchange

  needs-triage
  stacklok/toolhive#6896 · Filter by author jhrozek opened on Oct 21, 2026

• Storage for refresh tokens issued by token exchange

  needs-triage
  stacklok/toolhive#6895 · Filter by author jhrozek opened on Oct 21, 2026

• Support authorization_details (RFC 9396) in token exchange

  needs-triage
  stacklok/toolhive#6894 · Filter by author jhrozek opened on Oct 21, 2026

• Stable pre-provisioned broker client for token exchange and ID-JAG redemption

  stacklok/toolhive#6893 · Filter by author jhrozek opened on Oct 21, 2026
  

• ID-JAG redemption: compare the requested resource with the assertion's resource claim, and decide the default when it is omitted

  needs-triage
  stacklok/toolhive#6892 · Filter by author jhrozek opened on Oct 21, 2026

• vMCP ignores clientSecretEnv for incoming OIDC, breaking token introspection

  bugneeds-triage
  stacklok/toolhive#6890 · Filter by author ngocketit opened on Oct 21, 2026

• vMCP embedded auth server: support Redis Sentinel authentication (sentinel username/password)

  needs-triage
  stacklok/toolhive#6889 · Filter by author nilsberberich opened on Oct 21, 2026

• vMCP: bind sessions to the client, acting agent, and delegated-access marker, not just the user

  needs-triage
  stacklok/toolhive#6888 · Filter by author jhrozek opened on Oct 20, 2026

• Delegated access: subject mapping and user approval

  needs-triage
  stacklok/toolhive#6887 · Filter by author jhrozek opened on Oct 20, 2026

• Authorization server: refresh tokens and ID-JAG issuance for delegated agents

  needs-triage
  stacklok/toolhive#6886 · Filter by author jhrozek opened on Oct 20, 2026

• User-owned upstream credential storage (RFC): shared rows, account binding, client scope, and lifecycle

  needs-triage
  stacklok/toolhive#6885 · Filter by author jhrozek opened on Oct 20, 2026

• CIMD client unresolved with 401 invalid_client when the metadata re-fetch fails transiently

  bugneeds-triage
  stacklok/toolhive#6856 · Filter by author alex-feel opened on Oct 19, 2026

• vMCP optimizer: optional cross-encoder rerank stage for find_tool

  needs-triage
  stacklok/toolhive#6852 · Filter by author Tanguille opened on Oct 17, 2026

• vMCP backend reconciler: same-named MCPRemoteProxy/MCPServer shadows an MCPServerEntry (GroupRef mismatch)

  needs-triage
  stacklok/toolhive#6842 · Filter by author aron-muon opened on Oct 16, 2026

• Operator: externalAuthConfigRef (headerInjection) on an MCPServerEntry is put into the vMCP config but its secret is not mounted when outgoingAuth.source: inline → vMCP fails to start

  needs-triage
  stacklok/toolhive#6837 · Filter by author nilsberberich opened on Oct 15, 2026
  3

  

• Drop blockOwnerDeletion on proxy-runner owned Services

  kubernetesneeds-triageoperator
  stacklok/toolhive#6836 · Filter by author jhrozek opened on Oct 15, 2026

• Proxy runner fails on OpenShift creating owned Services

  bugkubernetesneeds-triageoperator
  stacklok/toolhive#6835 · Filter by author jhrozek opened on Oct 15, 2026

• Re-authorization walks the full upstream chain instead of evaluating existing credentials

  bug
  stacklok/toolhive#6831 · Filter by author hellouz818 opened on Oct 15, 2026
  8

  

• vMCP: health-driven session tool resync replaces the session's tools with a partial result when single backend queries fail; tools stay missing until the next health change

  needs-triage
  stacklok/toolhive#6829 · Filter by author nilsberberich opened on Oct 14, 2026

• Support TLS for operator-wide default Redis session storage

  kubernetesneeds-triage
  stacklok/toolhive#6827 · Filter by author Sanskarzz opened on Oct 14, 2026