MCP Gateway RoadmapΒΆ
Release Overview
This roadmap outlines the planned development milestones for MCP Gateway, organized by release version with completion status and due dates.
Release Status SummaryΒΆ
Release | Due Date | Completion | Status | Description |
---|---|---|---|---|
1.6.0 | 02 Jun 2026 | 0 % | Open | New MCP Servers and Agents |
1.5.0 | 05 May 2026 | 0 % | Open | Documentation, Technical Debt, Bugfixes |
1.4.0 | 07 Apr 2026 | 0 % | Open | Technical Debt and Quality |
1.3.0 | 03 Mar 2026 | 0 % | Open | Catalog Improvements, A2A Improvements, MCP Standard Review and Sync, Technical Debt |
1.2.0 | 03 Feb 2026 | 0 % | Open | Release 1.2.0 - Catalog Enhancements, Ratings, experience and UI |
1.1.0 | 06 Jan 2026 | 0 % | Open | Post-GA Testing, Bugfixing, Documentation, Performance and Scale |
1.0.0 | 02 Dec 2025 | 0 % | Open | Release 1.0 General Availability & Release Candidate Hardening - stable & audited |
0.9.0 | 04 Nov 2025 | 1 % | Open | Interoperability, marketplaces & advanced connectivity |
0.8.0 | 07 Oct 2025 | 100 % | Closed | Enterprise Security & Policy Guardrails |
0.7.0 | 16 Sep 2025 | 100 % | Closed | Multitenancy and RBAC (Private/Team/Global catalogs), Extended Connectivity, Core Observability & Starter Agents (OpenAI and A2A) |
0.6.0 | 19 Aug 2025 | 100 % | Closed | Security, Scale & Smart Automation |
0.5.0 | 05 Aug 2025 | 100 % | Closed | Enterprise Operability, Auth, Configuration & Observability |
0.4.0 | 22 Jul 2025 | 100 % | Closed | Bugfixes, Security, Resilience (retry with exponential backoff), code quality and technical debt (test coverage, linting, security scans, GitHub Actions, Makefile, Helm improvements) |
0.3.0 | 08 Jul 2025 | 100 % | Closed | Annotations and multi-server tool federations |
0.2.0 | 24 Jun 2025 | 100 % | Closed | Streamable HTTP, Infra-as-Code, Dark Mode |
0.1.0 | 05 Jun 2025 | 100 % | Closed | Initial release |
Release 0.1.0 - Initial releaseΒΆ
Release 0.1.0 - Completed (100%)
Due: 05 Jun 2025 | Status: Closed Initial release
β¨ Completed Features (3)
π Completed Bugs (3)
π Completed Documentation (2)
Release 0.2.0 - Streamable HTTP, Infra-as-Code, Dark ModeΒΆ
Release 0.2.0 - Completed (100%)
Due: 24 Jun 2025 | Status: Closed Streamable HTTP, Infra-as-Code, Dark Mode
β¨ Completed Features (3)
π Completed Bugs (2)
π Completed Documentation (3)
Release 0.3.0 - Annotations and multi-server tool federationsΒΆ
Release 0.3.0 - Completed (100%)
Due: 08 Jul 2025 | Status: Closed Annotations and multi-server tool federations
β¨ Completed Features (8)
- β #265 - [Feature Request]: Sample MCP Server - Go (fast-time-server)
- β #179 - [Feature Request]: Configurable Connection Retries for DB and Redis
- β #159 - [Feature Request]: Add auto activation of mcp-server, when it goes up back again
- β #154 - [Feature Request]: Export connection strings to various clients from UI and via API
- β #135 - [Feature Request]: Dynamic UI Picker for Tool, Resource, and Prompt Associations
- β #116 - [Feature Request]: Namespace Composite Key & UUIDs for Tool Identity
- β #100 - Add path parameter or replace value in input payload for a REST API?
- β #26 - [Feature]: Add dark mode toggle to Admin UI
π Completed Bugs (9)
- β #316 - [Bug]: Correctly create filelock_path: str = "tmp/gateway_service_leader.lock" in /tmp not current directory
- β
#303 - [Bug]: Update manager.py and admin.js removed
is_active
field - replace with separateenabled
andreachable
fields from migration - β
#302 - [Bug]: Alembic configuration not packaged with pip wheel,
pip install . && mcpgateway
fails on db migration - β #197 - [Bug]: Pytest run exposes warnings from outdated Pydantic patterns, deprecated stdlib functions
- β #189 - [Bug]: Close button for parameter input scheme does not work
- β #152 - [Bug]: not able to add Github Remote Server
- β #132 - [Bug]: SBOM Generation Failure
- β #131 - [Bug]: Documentation Generation fails due to error in Makefile's image target
- β #28 - [Bug]: Reactivating a gateway logs warning due to 'dict' object used as Pydantic model
π Completed Documentation (1)
- β #18 - [Docs]: Add Developer Workstation Setup Guide for Mac (Intel/ARM), Linux, and Windows
Release 0.4.0 - Bugfixes, Security, Resilience (retry with exponential backoff), code quality and technical debt (test coverage, linting, security scans, GitHub Actions, Makefile, Helm improvements)ΒΆ
Release 0.4.0 - Completed (100%)
Due: 22 Jul 2025 | Status: Closed Bugfixes, Security, Resilience (retry with exponential backoff), code quality and technical debt (test coverage, linting, security scans, GitHub Actions, Makefile, Helm improvements)
β¨ Completed Features (9)
- β #456 - [Feature Request]: HTTPX Client with Smart Retry and Backoff Mechanism
- β #351 - CHORE: Checklist for complete End-to-End Validation Testing for All API Endpoints, UI and Data Validation
- β #340 - [Security]: Add input validation for main API endpoints (depends on #339 /admin API validation)
- β #339 - [Security]: Add input validation for /admin endpoints
- β #338 - [Security]: Eliminate all lint issues in web stack
- β #336 - [Security]: Implement output escaping for user data in UI
- β #233 - [Feature Request]: Contextual Hover-Help Tooltips in UI
- β #181 - [Feature Request]: Test MCP Server Connectivity Debugging Tool
- β #177 - [Feature Request]: Persistent Admin UI Filter State
π Completed Bugs (26)
- β #508 - [BUG]: "PATCH" in global tools while creating REST API integration through UI
- β #495 - [Bug]: test_admin_tool_name_conflict creates record in actual db
- β #476 - [Bug]:UI Does Not Show Error for Duplicate Server Name
- β
#472 - [Bug]: auth_username and auth_password not getting set in GET /gateways/
API - β #471 - [Bug]: _populate_auth not working
- β #424 - [Bug]: MCP Gateway Doesn't Detect HTTPS/TLS Context or respect X-Forwarded-Proto when using Federation
- β #419 - [Bug]: Remove unused lock_file_path from config.py (trips up bandit)
- β #416 - [Bug]: Achieve 100% bandit lint for version.py (remove git command from version.py, tests and UI and rely on semantic version only)
- β #412 - [Bug]: Replace assert statements with explicit error handling in translate.py and fix bandit lint issues
- β #396 - [Bug]: Test server URL does not work correctly
- β #387 - [Bug]: Respect GATEWAY_TOOL_NAME_SEPARATOR for gateway slug
- β #384 - [Bug]: Push image to GHCR incorrectly runs in PR
- β #382 - [Bug]: API incorrectly shows version, use semantic version from init
- β #378 - [Bug] Fix Unit Tests to Handle UI-Disabled Mode
- β #374 - [Bug]: Fix "metrics-loading" Element Not Found Console Warning
- β #371 - [Bug]: Fix Makefile to let you pick docker or podman and work consistently with the right image name
- β #369 - [Bug]: Fix Version Endpoint to Include Semantic Version (Not Just Git Revision)
- β #367 - [Bug]: Fix "Test Server Connectivity" Feature in Admin UI
- β #366 - [Bug]: Fix Dark Theme Visibility Issues in Admin UI
- β #361 - [Bug]: Prompt and RPC Endpoints Accept XSS Content Without Validation Error
- β #359 - [BUG]: Gateway validation accepts invalid transport types
- β #356 - [Bug]: Annotations not editable
- β #355 - [Bug]: Large empty space after line number in text boxes
- β #354 - [Bug]: Edit screens not populating fields
- β #352 - [Bug]: Resources - All data going into content
- β
#213 - [Bug]:Can't use
STREAMABLEHTTP
π Completed Security (1)
- β #552 - [SECURITY CHORE]: Add comprehensive input validation security test suite
π§ Completed Chores (13)
- β #558 - [CHORE]: Ignore tests/security/test_input_validation.py in pre-commit for bidi-controls
- β #499 - [CHORE]: Add nodejsscan security scanner
- β #467 - [CHORE]: Achieve 100% docstring coverage (make interrogate) - currently at 96.3%
- β #433 - [CHORE]: Fix all Makefile targets to work without pre-activated venv and check for OS depends
- β #421 - [CHORE]: Achieve zero flagged Bandit issues
- β #415 - [CHORE]: Additional Python Security Scanners
- β #399 - [Test]: Create e2e acceptance test docs
- β #375 - [CHORE]: Fix yamllint to Ignore node_modules Directory
- β #362 - [CHORE]: Implement Docker HEALTHCHECK
- β #305 - [CHORE]: Add vulture (dead code detect) and unimport (unused import detect) to Makefile and GitHub Actions
- β #279 - [CHORE]: Implement security audit and vulnerability scanning with grype in Makefile and GitHub Actions
- β #249 - [CHORE]: Achieve 60% doctest coverage and add Makefile and CI/CD targets for doctest and coverage
- β #210 - [CHORE]: Raise pylint from 9.16/10 -> 10/10
π Completed Documentation (3)
Release 0.5.0 - Enterprise Operability, Auth, Configuration & ObservabilityΒΆ
Release 0.5.0 - Completed (100%)
Due: 05 Aug 2025 | Status: Closed Enterprise Operability, Auth, Configuration & Observability
β¨ Completed Features (4)
- β #663 - [Feature Request]: Add basic auth support for API Docs
- β #623 - [Feature Request]: Display default values from input_schema in test tool screen
- β #506 - [Feature Request]: New column for "MCP Server Name" in Global tools/resources etc
- β #392 - [Feature Request]: UI checkbox selection for servers, tools, and resources
π Completed Bugs (20)
- β #631 - [Bug]: Inconsistency in acceptable length of Tool Names for tools created via UI and programmatically
- β #630 - [Bug]: Gateway update fails silently in UI, backend throws ValidationInfo error
- β #622 - [Bug]: Test tool UI passes boolean inputs as on/off instead of true/false
- β #620 - [Bug]: Test tool UI passes array inputs as strings
- β #613 - [Bug]: Fix lint-web issues in admin.js
- β #610 - [Bug]: Edit tool in Admin UI sends invalid "STREAMABLE" value for Request Type
- β #603 - [Bug]: Unexpected error when registering a gateway with the same name.
- β #601 - [Bug]: APIs for gateways in admin and main do not mask auth values
- β #598 - [Bug]: Long input names in tool creation reflected back to user in error message
- β #591 - [Bug] Edit Prompt Fails When Template Field Is Empty
- β #584 - [Bug]: Can't register Github MCP Server in the MCP Registry
- β #579 - [Bug]: Edit tool update fail integration_type="REST"
- β #578 - [Bug]: Adding invalid gateway URL does not return an error immediately
- β #521 - [Bug]: Gateway ID returned as null by Gateway Create API
- β #507 - [Bug]: Makefile missing .PHONY declarations and other issues
- β #434 - [Bug]: Logs show"Invalid HTTP request received"
- β #430 - [Bug]: make serve doesn't check if I'm already running an instance (run-gunicorn.sh) letting me start the server multiple times
- β #423 - [Bug]: Redundant Conditional Expression in Content Validation
- β #373 - [Bug]: Clarify Difference Between "Reachable" and "Available" Status in Version Info
- β #357 - [Bug]: Improve consistency of displaying error messages
π Completed Security (1)
- β #425 - [SECURITY FEATURE]: Make JWT Token Expiration Mandatory when REQUIRE_TOKEN_EXPIRATION=true (depends on #87)
π§ Completed Chores (9)
- β #638 - [CHORE]: Add Makefile and GitHub Actions support for Snyk (test, code-test, container-test, helm charts)
- β #615 - [CHORE]: Add pypi package linters: check-manifest pyroma and verify target to GitHub Actions
- β #590 - [CHORE]: Integrate DevSkim static analysis tool via Makefile
- β
#410 - [CHORE]: Add
make lint filename|dirname
target to Makefile - β #403 - [CHORE]: Add time server (and configure it post-deploy) to docker-compose.yaml
- β #397 - [CHORE]: Migrate run-gunicorn-v2.sh to run-gunicorn.sh and have a single file (improved startup script with configurable flags)
- β #390 - [CHORE]: Add lint-web to CI/CD and add additional linters to Makefile (jshint jscpd markuplint)
- β #365 - [CHORE]: Fix Database Migration Commands in Makefile
- β #363 - [CHORE]: Improve Error Messages - Replace Raw Technical Errors with User-Friendly Messages
Release 0.6.0 - Security, Scale & Smart AutomationΒΆ
Release 0.6.0 - Completed (100%)
Due: 19 Aug 2025 | Status: Closed Security, Scale & Smart Automation
β¨ Completed Features (30)
- β #773 - [Feature]: add support for external plugins
- β #749 - [Feature Request]: MCP Reverse Proxy - Bridge Local Servers to Remote Gateways
- β #737 - [Feature Request]: Bulk Tool Import
- β #735 - [Epic]: Vendor Agnostic OpenTelemetry Observability Support
- β #727 - [Feature]: Phoenix Observability Integration plugin
- β #720 - [Feature]: Add CLI for authoring and packaging plugins
- β #708 - [Feature Request]: MCP Elicitation (v2025-06-18)
- β #705 - [Feature Request]: Option to completely remove Bearer token auth to MCP gateway
- β #690 - [Feature] Make SSE Keepalive Events Configurable
- β #682 - [Feature]: Add tool hooks (tool_pre_invoke / tool_post_invoke) to plugin system
- β #673 - [ARCHITECTURE] Identify Next Steps for Plugin Development
- β #672 - [CHORE]: Part 2: Replace Raw Errors with Friendly Messages in main.py
- β #668 - [Feature Request]: Add Null Checks and Improve Error Handling in Frontend Form Handlers (admin.js)
- β #586 - [Feature Request]: Tag support with editing and validation across all APIs endpoints and UI (tags)
- β #540 - [SECURITY FEATURE]: Configurable Well-Known URI Handler including security.txt and robots.txt
- β #533 - [SECURITY FEATURE]: Add Additional Configurable Security Headers to APIs for Admin UI
- β #492 - [Feature Request]: Change UI ID field name to UUID
- β #452 - [Bug]: integrationType should only support REST, not MCP (Remove Integration Type: MCP)
- β #405 - [Bug]: Fix the go time server annotation (it shows as destructive)
- β #404 - [Feature Request]: Add resources and prompts/prompt templates to time server
- β #380 - [Feature Request]: REST Endpoints for Go fast-time-server
- β #368 - [Feature Request]: Enhance Metrics Tab UI with Virtual Servers and Top 5 Performance Tables
- β #364 - [Feature Request]: Add Log File Support to MCP Gateway
- β #344 - [CHORE]: Implement additional security headers and CORS configuration
- β #320 - [Feature Request]: Update Streamable HTTP to fully support Virtual Servers
- β #319 - [Feature Request]: AI Middleware Integration / Plugin Framework for extensible gateway capabilities
- β #317 - [CHORE]: Script to add relative file path header to each file and verify top level docstring
- β #315 - [CHORE] Check SPDX headers Makefile and GitHub Actions target - ensure all files have File, Author(s) and SPDX headers
- β #313 - [DESIGN]: Architecture Decisions and Discussions for AI Middleware and Plugin Framework (Enables #319)
- β #208 - [AUTH FEATURE]: HTTP Header Passthrough (forward headers to MCP server)
π Completed Bugs (22)
- β #774 - [Bug]: Tools Annotations not working and need specificity for mentioning annotations
- β #765 - [Bug]: illegal IP address string passed to inet_aton during discovery process
- β #753 - [BUG] Tool invocation returns 'Invalid method' error after PR #746
- β #744 - [BUG] Gateway fails to connect to services behind CDNs/load balancers due to DNS resolution
- β #741 - [Bug]: Enhance Server Creation/Editing UI for Prompt and Resource Association
- β #728 - [Bug]: Streamable HTTP Translation Feature: Connects but Fails to List Tools, Resources, or Support Tool Calls
- β #716 - [Bug]: Resources and Prompts not displaying in Admin Dashboard while Tools are visible
- β #704 - [Bug]: Virtual Servers don't actually work as advertised v0.5.0
- β #696 - [Bug]: SSE Tool Invocation Fails After Integration Type Migration post PR #678
- β #694 - [BUG]: Enhanced Validation Missing in GatewayCreate
- β #689 - Getting "Unknown SSE event: keepalive" when trying to use virtual servers
- β #685 - [Bug]: Multiple Fixes and improved security for HTTP Header Passthrough Feature
- β #666 - [Bug]:Vague/Unclear Error Message "Validation Failed" When Adding a REST Tool
- β #661 - [Bug]: Database migration runs during doctest execution
- β #649 - [Bug]: Duplicate Gateway Registration with Equivalent URLs Bypasses Uniqueness Check
- β #646 - [Bug]: MCP Server/Federated Gateway Registration is failing
- β #560 - [Bug]: Can't list tools when running inside of a docker
- β #557 - [BUG] Cleanup tool descriptions to remove newlines and truncate text
- β #526 - [Bug]: Unable to add multiple headers when adding a gateway through UI (draft)
- β #520 - [Bug]: Resource mime-type is always stored as text/plain
- β #518 - [Bug]: Runtime error from Redis when multiple sessions exist
- β #417 - [Bug]: Intermittent doctest failure in /mcpgateway/cache/resource_cache.py:7
π§ Completed Chores (8)
- β #481 - [Bug]: Intermittent test_resource_cache.py::test_expiration - AssertionError: assert 'bar' is None (draft)
- β #480 - [Bug]: Alembic treated as first party dependency by isort
- β #479 - [Bug]: Update make commands for alembic
- β #478 - [Bug]: Alembic migration is broken
- β #436 - [Bug]: Verify content length using the content itself when the content-length header is absent.
- β #280 - [CHORE]: Add mutation testing with mutmut for test quality validation
- β #256 - [CHORE]: Implement comprehensive fuzz testing automation and Makefile targets (hypothesis, atheris, schemathesis , RESTler)
- β #254 - [CHORE]: Async Code Testing and Performance Profiling Makefile targets (flake8-async, cprofile, snakeviz, aiomonitor)
π Completed Documentation (4)
- β #306 - Quick Start (manual install) gunicorn fails
- β #186 - [Feature Request]: Granular Configuration Export & Import (via UI & API)
- β #185 - [Feature Request]: Portable Configuration Export & Import CLI (registry, virtual servers and prompts)
- β
#94 - [Feature Request]: Transport-Translation Bridge (
mcpgateway.translate
) any to any protocol conversion cli tool
β Completed Questions (3)
π¦ Completed Sample Servers (3)
Release 0.7.0 - Multitenancy and RBAC (Private/Team/Global catalogs), Extended Connectivity, Core Observability & Starter Agents (OpenAI and A2A)ΒΆ
Release 0.7.0 - Completed (100%)
Due: 16 Sep 2025 | Status: Closed Multitenancy and RBAC (Private/Team/Global catalogs), Extended Connectivity, Core Observability & Starter Agents (OpenAI and A2A)
β¨ Completed Features (21)
- β #989 - [Feature Request]: Sample MCP Server - Python PowerPoint Editor (python-pptx)
- β #986 - Plugin Request: Implement Argument Normalizer Plugin (Native)
- β #928 - Migrate container base images from UBI9 to UBI10 and Python from 3.11 to 3.12
- β #925 - Add MySQL database support to MCP Gateway
- β #860 - [EPIC]: Complete Enterprise Multi-Tenancy System with Team-Based Resource Scoping
- β #859 - [Feature Request]: Authentication & Authorization - IBM Security Verify Enterprise SSO Integration (Depends on #220)
- β #846 - [Bug]: Editing server converts hex UUID to hyphenated UUID format, lacks error handling
- β #844 - [Bug]: Creating a new virtual server with a custom UUID, removes the "-" hyphens from the UUID field.
- β #831 - [Bug]: Newly added or deleted tools are not reflected in Global Tools tab after server reactivation
- β #822 - [Bug]: Incorrect _sleep_with_jitter Method Call
- β #820 - [Bug]: Unable to create a new server with custom UUID
- β #605 - [Feature Request]: Access to remote MCP Servers/Tools via OAuth on behalf of Users
- β #570 - [Feature Request]: Word wrap in codemirror
- β #544 - [SECURITY FEATURE]: Database-Backed User Authentication with Argon2id (replace BASIC auth)
- β #491 - [Feature Request]: UI Keyboard shortcuts
- β #426 - [SECURITY FEATURE]: Configurable Password and Secret Policy Engine
- β #283 - [SECURITY FEATURE]: Role-Based Access Control (RBAC) - User/Team/Global Scopes for full multi-tenancy support
- β #282 - [SECURITY FEATURE]: Per-Virtual-Server API Keys with Scoped Access
- β #278 - [Feature Request]: Authentication & Authorization - Google SSO Integration Tutorial (Depends on #220)
- β #220 - [AUTH FEATURE]: Authentication & Authorization - SSO + Identity-Provider Integration
- β #87 - [Feature Request]: Epic: Secure JWT Token Catalog with Per-User Expiry and Revocation
π Completed Bugs (5)
π Completed Documentation (4)
- β #818 - [Docs]: Readme ghcr.io/ibm/mcp-context-forge:0.6.0 image still building
- β #323 - [Docs]: Add Developer Guide for using fast-time-server via JSON-RPC commands using curl or stdio
- β #19 - [Docs]: Add Developer Guide for using MCP via the CLI (curl commands, JSON-RPC)
- β #834 - [Bug]: Existing tool configurations are not updating after changes to the MCP server configuration.
Release 0.8.0 - Enterprise Security & Policy GuardrailsΒΆ
Release 0.8.0 - Completed (100%)
Due: 07 Oct 2025 | Status: Closed Enterprise Security & Policy Guardrails
β¨ Completed Features (17)
- β #1176 - [Feature Request]: Implement Team-Level Scoping for API Tokens
- β #1043 - [Feature]: Sample MCP Server - Implement Pandoc MCP server in Go
- β #1035 - [Feature Request]: Add "Team" Column to All Admin UI Tables (Tools, Gateway Server, Virtual Servers, Prompts, Resources)
- β #979 - [Feature Request]: OAuth Dynamic Client Registration
- β #964 - Support dynamic environment variable injection in mcpgateway.translate for STDIO MCP servers
- β #920 - Sample MCP Server - Go (calculator-server)
- β #900 - Sample MCP Server - Python (data-analysis-server)
- β #699 - [Feature]: Metrics Enhancement (export all data, capture all metrics, fix last used timestamps, UI improvements)
- β #298 - [Feature Request]: A2A Initial Support - Add A2A Servers as Tools
- β #243 - [Feature Request]: a2a compatibility?
- β #229 - [SECURITY FEATURE]: Guardrails - Input/Output Sanitization & PII Masking
- β #1045 - Sample MCP Server - Python (docx-server)
- β #1052 - Sample MCP Server - Python (chunker-server)
- β #1053 - Sample MCP Server - Python (code-splitter-server)
- β #1054 - Sample MCP Server - Python (xlsx-server)
- β #1055 - Sample MCP Server - Python (libreoffice-server)
- β #1056 - Sample MCP Server - Python (csv-pandas-chat-server)
π Completed Bugs (16)
- β #1178 - [Bug]: The header in UI overlaps with all the modals
- β #1117 - [Bug]:Login not working with 0.7.0 version
- β #1109 - [Bug]:MCP Gateway UI OAuth2 Integration Fails with Keycloak Due to Missing x-www-form-urlencoded Support
- β #1104 - [Bug]: X-Upstream-Authorization Header Not Working When Auth Type is None
- β #1101 - [Bug]:login issue
- β #1078 - [Bug]: OAuth Token Multi-Tenancy Support: User-Specific Token Handling Required
- β #1048 - [Bug]: Login issue - Serving over HTTP requires SECURE_COOKIES=false (warning required)
- β #1046 - [Bug]: pass-through headers are not functioning as expected
- β #1039 - [Bug]:Update Gateway fails
- β #1025 - [Bug]:After edit/save of an MCP Server with OAUTh2 Authentication I need to also fetch tools.
- β #1022 - [Bug] "Join Request" button shows no pending request for team membership
- β #959 - [Bug]: Unable to Re-add Team Member Due to Unique Constraint on (team_id, user_email)
- β #949 - [Bug]: Tool invocation for an MCP server authorized by OAUTH2 fails
- β #948 - [Bug]:MCP OAUTH2 authenticate server is shown as offline after is added
- β #941 - [Bug]: Access Token scoping not working
- β #939 - [Bug]: Missing Document links in SSO page for Team/RBAC management
π§ Completed Chores (3)
- β #931 - [Bug]: Helm install does not work when kubeVersion has vendor specific suffix
- β #867 - [Bug]: update_gateway does not persist passthrough_headers field
- β #845 - [Bug]:2025-08-28 05:47:06,733 - mcpgateway.services.gateway_service - ERROR - FileLock health check failed: can't start new thread
π Completed Documentation (3)
π Completed Plugin Features (29)
- β #1077 - [Plugin] Create ClamAV External Plugin using Plugin Framework
- β #1076 - [Plugin] Create Summarizer Plugin using Plugin Framework
- β #1075 - [Plugin] Create Watchdog Plugin using Plugin Framework
- β #1074 - [Plugin] Create Timezone Translator Plugin using Plugin Framework
- β #1073 - [Plugin] Create Privacy Notice Injector Plugin using Plugin Framework
- β #1072 - [Plugin] Create License Header Injector Plugin using Plugin Framework
- β #1071 - [Plugin] Create Response Cache by Prompt Plugin using Plugin Framework
- β #1070 - [Plugin] Create Circuit Breaker Plugin using Plugin Framework
- β #1069 - [Plugin] Create Citation Validator Plugin using Plugin Framework
- β #1068 - [Plugin] Create Code Formatter Plugin using Plugin Framework
- β #1067 - [Plugin] Create AI Artifacts Normalizer Plugin using Plugin Framework
- β #1066 - [Plugin] Create Robots License Guard Plugin using Plugin Framework
- β #1065 - [Plugin] Create SQL Sanitizer Plugin using Plugin Framework
- β #1064 - [Plugin] Create Harmful Content Detector Plugin using Plugin Framework
- β #1063 - [Plugin] Create Safe HTML Sanitizer Plugin using Plugin Framework
- β #1005 - [Plugin] Create VirusTotal Checker Plugin using Plugin Framework
- β #1004 - [Plugin] Create URL Reputation Plugin using Plugin Framework
- β #1003 - [Plugin] Create Schema Guard Plugin using Plugin Framework
- β #1002 - [Plugin] Create Retry with Backoff Plugin using Plugin Framework
- β #1001 - [Plugin] Create Rate Limiter Plugin using Plugin Framework
- β #1000 - [Plugin] Create Output Length Guard Plugin using Plugin Framework
- β #999 - [Plugin] Create Markdown Cleaner Plugin using Plugin Framework
- β #998 - [Plugin] Create JSON Repair Plugin using Plugin Framework
- β #997 - [Plugin] Create HTML to Markdown Plugin using Plugin Framework
- β #996 - [Plugin] Create File Type Allowlist Plugin using Plugin Framework
- β #995 - [Plugin] Create Code Safety Linter Plugin using Plugin Framework
- β #994 - [Plugin] Create Cached Tool Result Plugin using Plugin Framework
- β #895 - [Plugin] Create Header Injector Plugin using Plugin Framework
- β #894 - [Plugin] Create Secrets Detection Plugin using Plugin Framework
- β #893 - [Plugin] Create JSON Schema Validator Plugin using Plugin Framework
π¦ Completed Sample Servers (10)
- β #1062 - Sample MCP Server - Python (url-to-markdown-server)
- β #1061 - Sample MCP Server - Python (python-sandbox-server)
- β #1060 - Sample MCP Server - Python (latex-server)
- β #1059 - Sample MCP Server - Python (graphviz-server)
- β #1058 - Sample MCP Server - Python (mermaid-server)
- β #1057 - Sample MCP Server - Python (plotly-server)
- β #841 - [Bug]: For A2A Agent, tools are not getting listed under Global Tools
- β #839 - [Bug]:Getting 401 un-authorized on Testing tools in "In-Cognito" mode.
- β #836 - [Bug]: Server Tags Not Propagated to Tools via /tools Endpoint
Release 0.9.0 - Interoperability, marketplaces & advanced connectivityΒΆ
Release 0.9.0 - In Progress (1%)
Due: 04 Nov 2025 | Status: Open Interoperability, marketplaces & advanced connectivity
β¨ Completed Features (1)
- β #869 - [Question]: 0.7.0 Release timeline
β¨ Features (23)
- #1140 - [Feature Request]: Reduce Complexity in Plugin Configuration Framework
- #1137 - [Feature Request]: Add missing hooks to OPA plugin
- #1136 - [Feature Request]: Feature Request: Add depends_on key in plugin configurations
- #1122 - [Feature Request]: Investigate Bearer Token Validation in MCP/Forge with Keycloak JWT
- #1111 - [Feature Request]: Support application/x-www-form-urlencoded Requests in MCP Gateway UI for OAuth2 / Keycloak Integration
- #1093 - [Feature Request]: Role-Based Access Control (RBAC) - support generic oAuth provider or ldap provider
- #1042 - [Feature Request]: Implementation Plan for Root Directory
- #1019 - [Feature] Authentication Architecture through Plugin System
- #975 - Feature Request: Implement Session Persistence & Pooling for Improved Performance and State Continuity
- #974 - [Feature Request]: Make users change default admin passwords and secrets for production deployments.
- #932 - [Feature Request]: Air-Gapped Environment Support
- #848 - [Feature Request]: Allow same prompt name when adding two different mcp server
- #835 - [Feature Request]: Adding Custom annotation for the tools
- #782 - [Feature Request]: OAuth Enhancement following PR 768
- #758 - Implement missing MCP protocol methods
- #756 - [Feature Request]: REST Passthrough APIs with Pre/Post Plugins (JSONPath and filters)
- #743 - [Feature Request]: Enhance Server Creation/Editing UI for Prompt and Resource Association
- #732 - [Feature Request]: Enhance Handling of Long Tool Descriptions
- #706 - [Feature Request]: ABAC Virtual Server Support
- #683 - [Feature Request]: Debug headers and passthrough headers, e.g. X-Tenant-Id, X-Trace-Id, Authorization for time server (go) (draft)
- #534 - [SECURITY FEATURE]: Add Security Configuration Validation and Startup Checks
- #295 - [Feature Request]: MCP Server Marketplace and Registry
- #277 - [Feature Request]: Authentication & Authorization - GitHub SSO Integration Tutorial (Depends on #220)
π Bugs (18)
- #1098 - [Bug]:Unable to see request payload being sent
- #1094 - [Bug]: Creating an MCP OAUTH2 server fails if using API.
- #1092 - [Bug]: after issue 1078 change, how to add X-Upstream-Authorization header when click Authorize in admin UI
- #1047 - [Bug]:MCP Server/Federated Gateway Registration is failing
- #1024 - [Bug]: plugin that is using tool_prefetch hook cannot access PASSTHROUGH_HEADERS, tags for an MCP Server Need MCP-GW restart
- #969 - Backend Multi-Tenancy Issues - Critical bugs and missing features
- #967 - UI Gaps in Multi-Tenancy Support - Visibility fields missing for most resource types
- #946 - [Bug]: Alembic migrations fails in docker compose setup
- #945 - [Bug]: Unique Constraint is not allowing Users to create servers/tools/resources/prompts with Names already used by another User
- #926 - [BUG] Bootstrap fails to assign platform_admin role due to foreign key constraint violation
- #922 - [Bug]: In 0.6.0 Version, IFraming the admin UI is not working.
- #861 - [Bug]: Passthrough header parameters not persisted to database
- #842 - [Bug]: 401 on privileged actions after cold restart despite valid login
- #625 - [Bug]: Gateway unable to register gateway or call tools on MacOS
- #464 - [Bug]: MCP Server "Active" status not getting updated under "Gateways/MCP Servers" when the MCP Server shutdown.
- #448 - [Bug]:MCP server with custom base path "/api" instead of "mcp" or "sse" is not working
- #409 - [Bug]: Add configurable limits for data cleaning / XSS prevention in .env.example and helm (draft)
- #383 - [Bug]: Remove migration step from Helm chart (now automated, no longer needed)
π Security (2)
π§ Chores (4)
- #1108 - [Bug]: When using postgresql as database, high postgresql transaction rollback rate detected
- #386 - [Feature Request]: Gateways/MCP Servers Page Refresh
- #301 - [Feature Request]: Full Circuit Breakers for Unstable MCP Server Backends support (extend existing healthchecks with half-open state)
- #300 - [Feature Request]: Structured JSON Logging with Correlation IDs
π Documentation (1)
- #172 - [Feature Request]: Enable Auto Refresh and Reconnection for MCP Servers in Gateways
π Plugin Features (4)
π¦ Sample Servers (3)
Release 1.0.0 - Release 1.0 General Availability & Release Candidate Hardening - stable & auditedΒΆ
Release 1.0.0 - In Progress (0%)
Due: 02 Dec 2025 | Status: Open Release 1.0 General Availability & Release Candidate Hardening - stable & audited
β¨ Features (62)
- #1171 - [Feature]: gRPC-to-MCP Protocol Translation
- #1138 - [Feature Request]: Support for container builds for s390x
- #950 - Session Management & Tool Invocation with Gateway vs Direct MCP ClientβServer
- #921 - Sample MCP Server - Python (weather-data-server)
- #919 - Sample MCP Server - Python (qr-code-server)
- #912 - Sample Agent - IBM BeeAI Framework Integration (OpenAI & A2A Endpoints)
- #911 - Create IBM Granite Embedding Models MCP Server
- #910 - Create IBM Granite Geospatial Models MCP Server
- #909 - Create IBM Granite Guardian Safety Models MCP Server
- #908 - Create IBM Granite Time Series Models MCP Server
- #907 - Create IBM Granite Speech Models MCP Server
- #906 - Create IBM Granite Vision Models MCP Server
- #905 - Create IBM Granite Language Models MCP Server
- #904 - Sample MCP Server - TypeScript (real-time-collaboration-server)
- #903 - Sample MCP Server - TypeScript (web-automation-server)
- #902 - Sample MCP Server - Rust (performance-benchmark-server)
- #901 - Sample MCP Server - Rust (crypto-tools-server)
- #899 - Sample MCP Server - Python (ml-inference-server)
- #898 - Sample MCP Server - Go (system-monitor-server)
- #897 - Sample MCP Server - Go (database-query-server)
- #896 - Add Prompt Authoring Tools Category to MCP Eval Server
- #892 - Update and test IBM Cloud deployment documentation and automation
- #806 - [CHORE]: Bulk Import β Missing error messages and registration feedback in UI
- #751 - [Feature] MCP Server - Implement MCP Evaluation Benchmarks Suite
- #738 - [Feature Request]: Configuration Database for Dynamic Settings Management
- #674 - [CHORE]: Automate release management process (draft)
- #595 - [CHORE] Investigate potential migration to UUID7 (draft)
- #589 - [CHORE]: generating build provenance attestations for workflow artifacts (draft)
- #574 - [CHORE]: Run pyupgrade to upgrade python syntax (draft)
- #565 - [Feature Request]: Docs for block/goose (draft)
- #546 - [Feature Request]: Protocol Version Negotiation & Backward Compatibility
- #543 - [SECURITY FEATURE]: CSRF Token Protection System
- #542 - [SECURITY FEATURE]: Helm Chart - Enterprise Secrets Management Integration (Vault)
- #541 - [SECURITY FEATURE]: Enhanced Session Management for Admin UI
- #539 - [SECURITY FEATURE]: Tool Execution Limits & Resource Controls
- #538 - [SECURITY FEATURE] Content Size & Type Security Limits for Resources & Prompts
- #537 - [SECURITY FEATURE]: Simple Endpoint Feature Flags (selectively enable or disable tools, resources, prompts, servers, gateways, roots)
- #536 - [SECURITY FEATURE]: Generic IP-Based Access Control (allowlist)
- #535 - [SECURITY FEATURE]: Audit Logging System
- #505 - [Feature Request]: Add ENV token forwarding management per tool (draft)
- #432 - [PERFORMANCE]: Performance Optimization Implementation and Guide for MCP Gateway (baseline)
- #414 - [CHORE]: Restructure Makefile targets (ex: move grype to container scanning section), or have a dedicated security scanning section
- #408 - [CHORE]: Add normalize script to pre-commit hooks (draft)
- #407 - [CHORE]: Improve pytest and plugins (draft)
- #402 - [CHORE]: Add post-deploy step to helm that configures the Time Server as a Gateway (draft)
- #398 - [CHORE]: Enforce pre-commit targets for doctest coverage, pytest coverage, pylint score 10/10, flake8 pass and add badges
- #391 - [CHORE]: Setup SonarQube quality gate (draft)
- #377 - [CHORE]: Fix PostgreSQL Volume Name Conflicts in Helm Chart (draft)
- #341 - [CHORE]: Enhance UI security with DOMPurify and content sanitization
- #318 - [CHORE]: Publish Agents and Tools that leverage codebase and templates (draft)
- #312 - [CHORE]: End-to-End MCP Gateway Stack Testing Harness (mcpgateway, translate, wrapper, mcp-servers)
- #307 - [CHORE]: GitHub Actions to build docs, with diagrams and test report, and deploy to GitHub Pages using MkDocs on every push to main
- #294 - [Feature Request]: Automated MCP Server Testing and Certification
- #292 - [CHORE]: Enable AI Alliance Analytics Stack Integration
- #291 - [CHORE]: Comprehensive Scalability & Soak-Test Harness (Long-term Stability & Load) - locust, pytest-benchmark, smocker mocked MCP servers
- #290 - [CHORE]: Enhance Gateway Tuning Guide with PostgreSQL Deep-Dive
- #289 - [Feature Request]: Multi-Layer Caching System (Memory + Redis)
- #288 - [Feature Request]: MariaDB Support Testing, Documentation, CI/CD (alongside PostgreSQL & SQLite)
- #287 - [Feature Request]: API Path Versioning /v1 and /experimental prefix
- #286 - [Feature Request]: Dynamic Configuration UI & Admin API (store config in database after db init)
- #284 - [AUTH FEATURE]: LDAP / Active-Directory Integration
- #281 - [CHORE]: Set up contract testing with Pact (pact-python) including Makefile and GitHub Actions targets
- #276 - [Feature Request]: Terraform Module β "mcp-gateway-ibm-cloud" supporting IKS, ROKS, Code Engine targets
- #275 - [Feature Request]: Terraform Module - "mcp-gateway-gcp" supporting GKE and Cloud Run
- #274 - [Feature Request]: Terraform Module - "mcp-gateway-azure" supporting AKS and ACA
- #273 - [Feature Request]: Terraform Module - "mcp-gateway-aws" supporting both EKS and ECS Fargate targets
- #272 - [Feature Request]: Observability - Pre-built Grafana Dashboards & Loki Log Export
- #267 - [Feature Request]: Sample MCP Server β Java Implementation ("plantuml-server")
- #266 - [Feature Request]: Sample MCP Server - Rust Implementation ("filesystem-server")
- #264 - [DOCS]: GA Documentation Review & End-to-End Validation Audit
- #261 - [CHORE]: Implement 90% Test Coverage Quality Gate and automatic badge and coverage html / markdown report publication
- #260 - [CHORE]: Manual security testing plan and template for release validation and production deployments
- #259 - [CHORE]: SAST (Semgrep) and DAST (OWASP ZAP) automated security testing Makefile targets and GitHub Actions
- #257 - [SECURITY FEATURE]: Gateway-Level Rate Limiting, DDoS Protection & Abuse Detection
- #255 - [CHORE]: Implement comprehensive Playwright test automation for the entire MCP Gateway Admin UI with Makefile targets and GitHub Actions
- #252 - [CHORE]: Establish database migration testing pipeline with rollback validation across SQLite, Postgres, and Redis
- #251 - [CHORE]: Automatic performance testing and tracking for every build (hey) including SQLite and Postgres / Redis configurations
- #250 - [CHORE]: Implement automatic API documentation generation using mkdocstrings and update Makefile
- #234 - [Feature Request]: π§ Protocol Feature β Elicitation Support (MCP 2025-06-18)
- #230 - [SECURITY FEATURE]: Cryptographic Request & Response Signing
- #223 - [CHORE]: Helm Chart Test Harness & Red Hat chart-verifier
- #222 - [CHORE]: Helm chart build Makefile with lint and values.schema.json validation + CODEOWNERS, CHANGELOG.md, .helmignore and CONTRIBUTING.md
- #221 - [SECURITY FEATURE]: Gateway-Level Input Validation & Output Sanitization (prevent traversal)
- #218 - [Feature Request]: Prometheus Metrics Instrumentation using prometheus-fastapi-instrumentator
- #217 - [Feature Request]: Graceful-Shutdown Hooks for API & Worker Containers (SIGTERM-safe rollouts, DB-pool cleanup, zero-drop traffic)
- #216 - [CHORE]: Add spec-validation targets and make the OpenAPI build go green
- #212 - [CHORE]: Achieve zero flagged SonarQube issues
- #211 - [CHORE]: Achieve Zero Static-Type Errors Across All Checkers (mypy, ty, pyright, pyrefly)
- #209 - [Feature Request]: Anthropic Desktop Extensions DTX directory/marketplace
- #182 - [Feature Request]: Semantic tool auto-filtering
- #175 - [Feature Request]: Add OpenLLMetry Integration for Observability
- #130 - [Feature Request]: Dynamic LLM-Powered Tool Generation via Prompt
- #123 - [Feature Request]: Dynamic Server Catalog via Rule, Regexp, Tags - or Embedding / LLM-Based Selection
- #114 - [Feature Request]: Connect to Dockerized MCP Servers via STDIO
- #22 - [Docs]: Add BeeAI Framework client integration (Python & TypeScript)
Release 1.1.0 - Post-GA Testing, Bugfixing, Documentation, Performance and ScaleΒΆ
Release 1.1.0 - Planned
Due: 06 Jan 2026 | Status: Open Post-GA Testing, Bugfixing, Documentation, Performance and Scale
β¨ Features (39)
- #918 - Document Javadocs.dev MCP Server integration with MCP Gateway
- #917 - Document Hugging Face MCP Server integration with MCP Gateway
- #916 - Document monday.com MCP Server integration with MCP Gateway
- #915 - Document GitHub MCP Server integration with MCP Gateway
- #914 - Document Box MCP Server integration with MCP Gateway
- #913 - Document Atlassian MCP Server integration with MCP Gateway
- #891 - Document BeeAI Framework integration with MCP Gateway
- #890 - Document Langflow as MCP Server integration with MCP Gateway
- #889 - Document MCP Composer integration with MCP Gateway
- #888 - Document Docling MCP Server integration with MCP Gateway
- #887 - Document DataStax Astra DB MCP Server integration with MCP Gateway
- #886 - Document Vault Radar MCP Server integration with MCP Gateway
- #885 - Document Terraform MCP Server integration with MCP Gateway
- #884 - Document WxMCPServer (webMethods Hybrid Integration) integration with MCP Gateway
- #883 - Document IBM API Connect for GraphQL MCP integration with MCP Gateway
- #882 - Document IBM Storage Insights MCP Server integration with MCP Gateway
- #881 - Document IBM Instana MCP Server integration with MCP Gateway
- #880 - Document IBM Cloud VPC MCP Server integration with MCP Gateway
- #879 - Document IBM Cloud Code Engine MCP Server integration with MCP Gateway
- #878 - Document IBM Cloud MCP Server integration with MCP Gateway
- #877 - Document IBM watsonx.data Document Retrieval MCP Server integration with MCP Gateway
- #876 - Document IBM ODM MCP Server integration with MCP Gateway
- #875 - Document IBM MQ Server MCP integration with MCP Gateway
- #874 - Document IBM Decision Intelligence MCP Server integration with MCP Gateway
- #873 - Document watsonx Orchestrate integration with MCP Gateway
- #872 - Document watsonx.ai integration with MCP Gateway
- #871 - Document Langflow integration with MCP Gateway
- #707 - [Feature Request]: Customizable Admin Panel
- #654 - [Feature Request]: Pre-register checks (mcp server scan) (draft)
- #647 - Configurable caching for tools (draft)
- #566 - [Feature Request]: Add support for limiting specific fields to user defined values (draft)
- #545 - [Feature Request]: Hot-Reload Configuration Without Restart (move from .env to configuration database table) (draft)
- #503 - [Docs]: Tutorial: OpenWebUI with Ollama, LiteLLM, MCPO, and MCP Gateway Deployment Guide (Draft)
- #293 - [Feature Request]: Intelligent Load Balancing for Redundant MCP Servers
- #270 - [Feature Request]: MCP Server β Go Implementation ("libreoffice-server")
- #269 - [Feature Request]: MCP Server - Go Implementation (LaTeX Service)
- #268 - [Feature Request]: Sample MCP Server - Haskell Implementation ("pandoc-server") (html, docx, pptx, latex conversion)
- #263 - [Feature Request]: Sample Agent - CrewAI Integration (OpenAI & A2A Endpoints)
- #262 - [Feature Request]: Sample Agent - LangChain Integration (OpenAI & A2A Endpoints)
- #253 - [CHORE]: Implement chaos engineering tests for fault tolerance validation (network partitions, service failures)
Release 1.2.0 - Release 1.2.0 - Catalog Enhancements, Ratings, experience and UIΒΆ
Release 1.2.0 - Planned
Due: 03 Feb 2026 | Status: Open Release 1.2.0 - Catalog Enhancements, Ratings, experience and UI
β¨ Features (3)
Release 1.3.0 - Catalog Improvements, A2A Improvements, MCP Standard Review and Sync, Technical DebtΒΆ
Release 1.3.0 - Planned
Due: 03 Mar 2026 | Status: Open Catalog Improvements, A2A Improvements, MCP Standard Review and Sync, Technical Debt
β¨ Features (1)
- #299 - [Feature Request]: A2A Ecosystem Integration & Marketplace (Extends A2A support)
Release 1.4.0 - Technical Debt and QualityΒΆ
Release 1.4.0 - Planned
Due: 07 Apr 2026 | Status: Open Technical Debt and Quality
0 Open Issues - Milestone details TBD
Release 1.5.0 - Documentation, Technical Debt, BugfixesΒΆ
Release 1.5.0 - Planned
Due: 05 May 2026 | Status: Open Documentation, Technical Debt, Bugfixes
0 Open Issues - Milestone details TBD
Release 1.6.0 - New MCP Servers and AgentsΒΆ
Release 1.6.0 - Planned
Due: 02 Jun 2026 | Status: Open New MCP Servers and Agents
β¨ Features (1)
- #548 - [Feature]: GraphQL API Support for Tool Discovery
LegendΒΆ
- β¨ Feature Request - New functionality or enhancement
- π Bug - Issues that need to be fixed
- π Security - Security features and improvements
- β‘ Performance - Performance optimizations
- π§ Chore - Maintenance, tooling, or infrastructure work
- π Documentation - Documentation improvements or additions
- π Plugin Features - Plugin framework and plugin implementations
- π¦ Sample Servers - Sample MCP server implementations
- β Question - User questions (typically closed after resolution)
- β Completed - Issue has been resolved and closed
Contributing
Want to contribute to any of these features? Check out the individual GitHub issues for more details and discussion!