Problemsby GlyphModel Context Protocol users keep filing bugs
55 posts from 23 people22d activeRising, +10 this week
Posts per day
The posts behind it
MCP tool connection issues
The agent I created in Agent studio is having issues with connecting to the compute.googleapis.com mcp tool. It shows I added it in the instructions section of the agent but once I input a prompt instructing it to use the mcp tool, i get a missing tool registration error. Not...
Tracker: Fetch v2.4.0
## Summary Tracks the `fetch` server work that ships in **v2.4.0**. ## Sub-issues - #5370 fetch: cap the response body size while reading, instead of buffering it whole
Tracker: Filesystem v2.4.0
## Summary Tracks the `filesystem` server work that ships in **v2.4.0**. ## Sub-issues - #5432 filesystem: write_file into a missing directory returns a raw chdir error showing the server's working directory - #5431 filesystem: edit_file's whitespace-tolerant match fails when...
filesystem: decide whether to refuse Windows device names (CON, NUL) and trailing dots/spaces in paths
## Problem Follow-up to #5375, which refuses NTFS alternate-data-stream paths (`file.txt:stream`) on Windows. A comment on that issue named two neighbouring classes of Windows path that the filesystem server's path validation (`isPathWithinAllowedDirectories` in...
Tracker: Memory v2.4.0
## Summary Tracks the `memory` server work that ships in **v2.4.0**. ## Sub-issues - #5346 memory: decide whether to move the default graph file out of the package directory (breaking)
Tracker: Everything v2.4.0
## Summary Tracks the `everything` server work that ships in **v2.4.0**. ## Sub-issues - #5371 everything: bind the HTTP transports to loopback by default, with HOST to widen
Tracker: Git v2.4.0
## Summary Tracks the `git` server work that ships in **v2.4.0**. ## Sub-issues - #5230 docs(git): clarify unconfined default scope and repository confinement options in README and CLI - #5214 git server: git_log accepts a non-positive max_count and a negative value silently...
MCP get_workflow_execution: nodeNames/truncateData do not filter executionData.nodeExecutionStack of failed executions
...["Start"]`) and truncates (`truncateData: 1`) still receives the full input data of the failing node. Why this matters: MCP clients are usually LLM agents. People use `nodeNames` and `truncateData` specifically to keep sensitive or large data out of the model context, and the...
Release v2.3.0
Tracks the v2.3.0 milestone release: the audit, the version PRs (Version Packages, Prepare Python Release), the `v2/main` → `main` merge PR, the release ledger, and the Release. Closed by hand once the Release is published.
[Feature]: Opt-in upstream error details for OpenAPI-backed MCP tools
...they would need a separate direct API request or access to upstream diagnostics. No workaround has been validated in this report. **After this feature (ideal user flow):** an administrator permits business error fields for this API, and the caller can understand the rejection....
Food water_ml does not contribute to hydration total
## What happens Food variants with `water_ml` set do not contribute anything to the daily hydration total. The water history and the health summary hydration total stay at 0 even after logging drinks that carry `water_ml`. ## Steps to reproduce 1. Set `water_ml` on food variants...
everything/tasks: tasks/update checks MAX_ANSWER_BYTES against string length, so non-ASCII answers exceed the documented byte budget
| Field | Value | |---|---| | Labels (suggested) | `bug`, `everything`, `tasks` | | Reproduced on | commit `163a5e935756` (default branch at the time of analysis) | | Introduced by | commit `27b2d2415cdc0ad13782edb8b6c3cecd7846b78a` - *"feat(everything): serve both protocol eras...
Add mcp.market to the Resources section of ADDITIONAL.md
...### Which MCP feature does it demonstrate? (optional) _No response_ ### Alternatives or workarounds you have tried _No response_ ### Already built it locally? _No response_ ### Before you submit - [x] I searched existing issues and this is not a duplicate. - [x] This is a...
Tracker: Time v2.3.0
## Summary Tracks the `time` server work that ships in **v2.3.0**. ## Sub-issues - #5196 time: convert_time gives no warning when a fall-back wall time is ambiguous - #2853 mcp-server-time: Default Time Zone - #2710 Get past time from the Time MCP server
Tracker: Memory v2.3.0
## Summary Tracks the `memory` server work that ships in **v2.3.0**. ## Sub-issues - #5202 memory: say when to use read_graph, search_nodes and open_nodes in their descriptions - #5201 memory: add_observations stores a repeated observation twice when it appears twice in one call...
Tracker: Memory v2.2.0
## Summary Tracks the `memory` server work that ships in **v2.2.0**. ## Sub-issues - #5203 memory: a failed memory.json to memory.jsonl migration is silently ignored - #5058 memory: create_entities / create_relations / add_observations are marked non-destructive but drop data...
Tracker: Everything v2.2.0
## Summary Tracks the `everything` server work that ships in **v2.2.0**. ## Sub-issues - #5209 everything: trigger-elicitation-request summary lists fields the form does not have - #5207 everything: gzip-file-as-resource treats an HTTP error response as file content - #5130...
Tracker: Git v2.3.0
## Summary Tracks the `git` server work that ships in **v2.3.0**. ## Sub-issues - #5195 git: add prompts to demonstrate the Prompts feature - #5194 git: git_diff rejects revision ranges such as main..feature - #5176 git: the string "null" for base_branch, contains or...
Tracker: Fetch v2.2.0
...missing Content-Type header forces non-HTML payloads into readability extraction, failing with error - #4199 mcp-server-fetch hard-codes use_readability=True which requires Node.js (undeclared); fails silently when Node is unavailable or misconfigured - #3878 mcp-server-fetch...
Tracker: Git v2.2.0
## Summary Tracks the `git` server work that ships in **v2.2.0**. ## Sub-issues - #5225 git: README should state plainly that without --repository every reachable repository is in scope - #5193 git: the git_diff tools return undecodable text for non-UTF-8 file content - #5192...
security-advisory skill: document follow-up draft cards for an advisory's residual work
## Problem The \`security-advisory\` skill covers one draft card per advisory. It says nothing about work that an advisory's fix leaves open (a residual exposure, a platform the fix cannot reach yet). That work cannot be filed as a public issue before the advisory is published,...
Release v2.1.0
Release the **v2.1.0** milestone: `v2/main` → `main`, then publish, per the `release` skill. - [ ] Milestone complete (only this issue open) - [ ] 2a audit (report as a comment here; PR only if fixes are forced) - [ ] 2b Version Packages PR (#5242) linked, CI green, merged - [ ]...
[FEATURE] SoChain tools for Bitcoin, Litecoin, Dogecoin and Zcash data
**Feature Area:** Integration with external tools **Is your feature request related to a an existing bug? Please link it here.** NA **Describe the solution you'd like** crewai-tools has no tool for reading UTXO blockchain data, so a crew that checks a payment, audits a wallet or...
git: README should state plainly that without --repository every reachable repository is in scope
The git server's README does not say plainly what running without `--repository` means for access. ## Problem Without `--repository`, `mcp-server-git` acts on whatever `repo_path` each tool call names, so every Git repository the server process can reach is open to every tool,...
Tool contract drift across server-filesystem and server-everything releases (receipts, plus a PR diff action)
We pin MCP tool contracts (`{name, description, inputSchema}` over a canonical form, plus prompts and resources) and diff them across published versions. Two reference servers drift more than the reference role suggests, and none of it is per-tool visible in changelogs....
Simplifying networking for serverless
...network and security teams. That seemed manageable for a few endpoints, but quickly got painful once you needed to reach many resources across peered VNets or on-prem. . What PNG does: You delegate one subnet in your VNet/VPC to Databricks, and serverless traffic reaches that...
Proposal: Add source path and untrusted flag to read results
...### Which MCP feature does it demonstrate? (optional) _No response_ ### Alternatives or workarounds you have tried _No response_ ### Already built it locally? _No response_ - [x] I searched existing issues and this is not a duplicate. - [x] This is a request for this repository...
issue: Realtime voice unable to invoke MCP tools
### Before Submitting - [x] I searched open and closed issues and discussions for an existing report. - [x] I reproduced this bug on the latest release AND on the current `dev` branch, right before submitting this report. I did not just check an old version or rely on a check...
Protect v2/main against force-push and deletion
## Problem `v2/main`, the develop branch every PR targets, has no rulesets and no branch protection: `gh api repos/modelcontextprotocol/servers/rules/branches/v2/main` returns `[]`. Anyone with push access can force-push or delete it, and push to it without a PR. That also...
Decide whether the Python servers get a Streamable HTTP entry point
Split out of #4853 (Spec Refactor Wave 2 Part 2: Modern-era Python servers), which named it a decision point and left it out of scope. ## Question Should `fetch`, `git` and `time` gain a **Streamable HTTP** entry point beside stdio, so they can be run remotely? ## Context -...
mcp-server-git: git_status and the git_diff tools print non-ASCII paths as octal escapes, so git_add cannot take them back
### Which server? git (mcp-server-git) ### Server version 2026.10.10, from `v2/main` at `2f8dc42` ### How did you run the server? From a clone of this repository ### Transport stdio ### Protocol era Not sure. The repro calls the tool functions in-process, so it does not depend...
bug: MCP tool errors (`isError: true`) are reduced to a generic message before reaching the model
...schema-validation detour, and eventually building a parallel headless-browser workaround (which was then blocked by bot detection, HTTP 403, on the target website). A parallel agent session on the same machine diagnosed the actual failure in minutes. ## Root cause of the session...
fetch: call_tool and get_prompt ignore the requested name
## Problem `call_tool` in `server.py` never checks the tool name, so `call_tool("nope", {"url": ...})` fetches the URL. `get_prompt` likewise never checks the prompt name and serves the `fetch` prompt for any name. ## Where it is pinned `src/fetch/tests/test_protocol.py`:...
git: an unknown tool called without repo_path reports "'repo_path'" instead of Unknown tool
## Problem `call_tool` reads `arguments["repo_path"]` before dispatching on the tool name, so an unknown tool called without `repo_path` fails with the `KeyError` repr `'repo_path'` instead of an "Unknown tool" error. ## Where it is pinned `src/git/tests/test_protocol.py`:...
sequentialthinking: thought log formatting prints "undefined" and draws the box too wide
## Problem The formatted thought log written to stderr has three defects: - A revision with no `revisesThought` prints "revising thought undefined". - A `branchFromThought` with no `branchId` draws a Branch header reading "ID: undefined". - The border width counts the header's...
everything: trigger-elicitation-request is listed for a client that supports only URL-mode elicitation
## Problem `trigger-elicitation-request` sends a form-mode elicitation, but it is registered whenever the client declares the `elicitation` capability at all. A client that declares only URL-mode elicitation sees the tool listed, and every call to it fails. ## Where it is pinned...
git: git_show prints Python reprs instead of git's commit format
## Problem `git_show`'s header is built from Python objects, so it prints a quoted sha, a ` ` repr and a `datetime` repr that includes a memory address. For an added file it prints `--- None` where git prints `--- /dev/null`. ## Where it is pinned...
time: convert_time accepts a nonexistent (spring-forward) local time without warning
## Problem `convert_time` converts a wall-clock time that does not exist in the source timezone (for example 02:30 on 2024-03-10 in America/New_York) as if it were valid, reporting `-05:00`, with nothing to tell the caller that the time never occurred. ## Where it is pinned...
git: flag-injection guard messages reach the client wrapped as "Ref ... did not resolve to an object"
## Problem The flag-injection guards raise `BadName`, so their own message reaches the client wrapped in GitPython's `Ref ' ' did not resolve to an object`. The rejection works; the message is garbled. ## Where it is pinned `src/git/tests/test_protocol.py`:...
everything: trigger-elicitation-request-async polls past the 10-minute TTL it requests
## Problem `trigger-elicitation-request-async` creates its client task with a 10-minute TTL, then polls up to 600 times one second apart. With polling overhead that outlasts the TTL, so a client that honors the TTL expires the task and the tool fails on its last poll. ## Where...
filesystem: edit_file silently converts a CRLF file's line endings to LF
## Problem Any `edit_file` call on a file with CRLF line endings rewrites the whole file with LF endings, not just the edited region. On Windows-originated files that is a silent whole-file change. ## Where it is pinned `src/filesystem/__tests__/server-tools.test.ts`: "rewrites...
git: git_branch returns an unknown branch_type as a successful result
## Problem `git_branch` with a `branch_type` other than `local`, `remote` or `all` returns the text "Invalid branch type" as a normal result with `isError: false`. ## Where it is pinned `src/git/tests/test_protocol.py`: `test_git_branch_unknown_type_is_not_an_error`, added in...
everything: blobResource() labels blob content text/plain
## Problem `blobResource()` in `resources/templates.ts` returns blob (base64) content with `mimeType: "text/plain"`, while the blob resource template declares `application/octet-stream`. Every tool and prompt that embeds or links a blob resource inherits the wrong type, and the...
git: git_show fails on a commit that touches a non-UTF-8 file
## Problem `git_show` decodes each patch as strict UTF-8, so a commit that changes a Latin-1 (or other non-UTF-8) file fails the whole call with a decode error. ## Where it is pinned `src/git/tests/test_protocol.py`: `test_git_show_non_utf8_patch_is_decode_error`, added in #4974...
2026-07-28 Spec Refactor Wave 2: fix the known bugs the Wave 1 suites pin (legacy-era servers)
Part of the 2026-07-28 Spec Refactor tracker #4857. **Wave 2: fix the known bugs that the Wave 1 suites pin**, so the legacy-era servers are correct before the SDK migration. ## Why Wave 1 (#4854, #4855) built characterization suites that pin each server's **current** behavior,...
ServiceNow Engineer (3.5 yrs) looking to move into a startup sysadmin/IT systems role. How realistic is it?
...skills should I prioritize (Entra ID/Intune, Google Workspace, Okta, MDM, scripting)?. Any advice would be greatly appreciated.
Problems with UC MCP connection
We built a supervisor agent where one of the tools is the native databricks MCP connection (which is in beta). Today, the agent doesn’t work. Removing the MCP tool fixes it, so it’s definitely that. The agent response just says “received an invalid and unexpected value from the...
issue: MCP tool image result is uploaded to files storage, but the image content is also saved as part of meta JSON column of file database table
### Before Submitting - [x] I searched open and closed issues and discussions for an existing report. - [x] I reproduced this bug on the latest release AND on the current `dev` branch, right before submitting this report. I did not just check an old version or rely on a check...
[Bug]: agent_access_groups cannot be set on DB agents via /v1/agents
## What happened DB-backed A2A agents cannot carry `agent_access_groups`, even though LiteLLM already enforces it: the `LiteLLM_AgentsTable.agent_access_groups` column exists, key/team `object_permission.agent_access_groups` is honoured by `AgentRequestHandler` (list and...
`mcp-server-fetch` follows redirects with no private-IP / metadata SSRF guard |
Static review of public source at commit `f46d9578190b`. No traffic was sent to any MCP environment. The Fetch MCP server retrieves arbitrary URLs with redirects enabled and no private/link-local/metadata IP checks: `src/fetch/src/mcp_server_fetch/server.py`: The README already...
social media
...describe.** A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] **Describe the solution you'd like** A clear and concise description of what you want to happen. **Describe alternatives you've considered** A clear and concise description...
git_add reports 'Files staged successfully' when nothing was staged
### Describe the bug `git_add` returns the constant string `Files staged successfully` regardless of what the index actually took. `src/git/src/mcp_server_git/server.py:132-153`: `git add` exits 0 when it stages nothing, so two calls report success having done nothing: - `files:...
[TDCA Notice] Congratulations — your project has been selected for the TDCA configuration network
**[TDCA Notice] Congratulations - your project has been selected for the TDCA configuration network** Dear maintainers of `modelcontextprotocol/servers`: We are pleased to inform you that `modelcontextprotocol/servers` has been **selected through TDCA's institutional screening**...
bug
**Describe the bug** A clear and concise description of what the bug is. **To Reproduce** Steps to reproduce the behavior: 1. **Expected behavior** A clear and concise description of what you expected to happen. **Logs** If applicable, add logs to help explain your problem....
memory: delete tools report success when nothing matched
`delete_entities`, `delete_observations` and `delete_relations` return `success: true` with a hardcoded message regardless of what matched. `src/memory/index.ts`: The method returns `void`, so the handler never learns whether a name existed. A call naming an entity that is not...
Companies and products named
About this problem
Evidence
55 posts from 23 people in 10 places, about 6 a week over 66 days. Mostly on modelcontextprotocol/servers, r/databricks, open-webui/open-webui. Tools named alongside: Docker, Microsoft Azure, Databricks, Ollama.
Frustration Frustration 0 of 3· Seen on GitHub issues, Reddit
Summary, model-written
Model Context Protocol users face security vulnerabilities from unchecked URL redirects in the Fetch server alongside incomplete bug reports and configuration notices.
How it was grouped
Posts about Model Context Protocol that state a pain but match no known issue yet. First post Sep 2, 2026, latest Nov 6, 2026. Corroborated: 3 or more posts from 2 or more people or places. Method
Other Model Context Protocol problems
Model Context Protocol upgrades break working setups
18 posts from 15 people on GitHub issues, Reddit.
Model Context Protocol dependency conflicts break installs
6 posts from 4 people on GitHub issues.
Trouble with Model Context Protocol server
Top post: "MCP Server Trigger v2: tools/call right after session re-initialize succeeds but response is never delivered", one of 10 posts from 8 people on GitHub issues.
Model Context Protocol rate limits and usage caps block work
9 posts from 6 people on GitHub issues, Hacker News.
Model Context Protocol vulnerabilities are hard to triage and patch
6 posts from 6 people on Glyph Ibis, GitHub issues.
Model Context Protocol fails to return valid structured output
5 posts from 5 people on GitHub issues, Reddit.
Trouble with Model Context Protocol empty
Top post: "Settings env vars: ${VAR:-default} ignores default when VAR is set but empty", one of 4 posts from 3 people on GitHub issues.
Trouble with Model Context Protocol session
Top post: "docs: correct README MCP examples and distinguish checkpointing from session management", one of 4 posts from 3 people on GitHub issues.
Trouble with Model Context Protocol create
Top post: "memory: create_entities, create_relations and add_observations could declare idempotentHint: true", one of 3 posts from 3 people on GitHub issues.
Model Context Protocol login, SSO or OAuth breaks
3 posts from 3 people on GitHub issues.
Model Context Protocol tables suffer from small files and skew
3 posts from 2 people on GitHub issues.
Model Context Protocol compute costs spiral out of control
2 posts from 1 person on GitHub issues. Unverified.
History