Search results

Is scopesRequired supposed to be enforced on per-tool authRequired gates, or is the per-tool layer intentionally audience-only?

type: questionRequest for information or clarification.Request for information or clarification.

Status: Open.

#3120 In googleapis/mcp-toolbox;

· Jkaiser001 opened on Apr 23, 2026

Nightly Server Tier Assessment Failure

periodic-failure

Status: Open.

#3118 In googleapis/mcp-toolbox;

· github-actions opened on Apr 23, 2026

[source] Add source/tool for ScyllaDB

type: feature request‘Nice-to-have’ improvement, new feature or different behavior or design.‘Nice-to-have’ improvement, new feature or different behavior or design.

Status: Open.

Feature

#3117 In googleapis/mcp-toolbox;

· zseta opened on Apr 23, 2026

Default DNS-rebinding protection allows all domains by defaults

type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.Error or flaw in code with unintended results or allowing sub-optimal usage patterns.

Status: Open.

Bug

#3113 In googleapis/mcp-toolbox;

· JLLeitschuh opened on Apr 22, 2026

HTTP Source Request Results in 403 (RBAC Access Denied) in MCP Toolbox v1.0.0

type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.Error or flaw in code with unintended results or allowing sub-optimal usage patterns.

Status: Open.

Bug

#3111 In googleapis/mcp-toolbox;

· vksinha10 opened on Apr 21, 2026

HTTP Source Request Results in 403 (RBAC Access Denied) in MCP Toolbox v1.0.0

type: questionRequest for information or clarification.Request for information or clarification.

Status: Open.

#3110 In googleapis/mcp-toolbox;

· vksinha10 opened on Apr 21, 2026

Nightly Server Tier Assessment Failure

Status: Open.

#3108 In googleapis/mcp-toolbox;

· github-actions opened on Apr 20, 2026

Security: Unbounded request body on MCP HTTP handler enables memory exhaustion DoS

priority: p1Important issue which blocks shipping the next release. Will be fixed prior to next release.Important issue which blocks shipping the next release. Will be fixed prior to next release.

type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.Error or flaw in code with unintended results or allowing sub-optimal usage patterns.

Status: Open.

#3103 In googleapis/mcp-toolbox;

· Deeven-Seru opened on Apr 20, 2026

Cloud Run VPC documentation TODO unclear and missing actionable configuration details

priority: p1Important issue which blocks shipping the next release. Will be fixed prior to next release.Important issue which blocks shipping the next release. Will be fixed prior to next release.

type: docsImprovement to the documentation for an API.Improvement to the documentation for an API.

Status: Open.

Task

#3101 In googleapis/mcp-toolbox;

· NaniToka opened on Apr 19, 2026

Cloud SQL MCP execute_sql_readonly fails with IAM-authenticated users — missing auto_iam_authn flag

product: postgresPostgreSQLPostgreSQL

type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.Error or flaw in code with unintended results or allowing sub-optimal usage patterns.

Status: Open.

Bug

#3093 In googleapis/mcp-toolbox;

· ManalRizwan45 opened on Apr 17, 2026

feat: Native gRPC Transport Support for High-Performance Enterprise MCP

Status: Open.

#3080 In googleapis/mcp-toolbox;

· Deeven-Seru opened on Apr 16, 2026

Open authentication bypass in MCP middleware

priority: p1Important issue which blocks shipping the next release. Will be fixed prior to next release.Important issue which blocks shipping the next release. Will be fixed prior to next release.

status: help wantedStatus: Unplanned work open to contributions from the community.Status: Unplanned work open to contributions from the community.

type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.Error or flaw in code with unintended results or allowing sub-optimal usage patterns.

Status: Open.

#3076 In googleapis/mcp-toolbox;

· Deeven-Seru opened on Apr 16, 2026