MCP Gateway Roadmap¶
Release Overview
This roadmap outlines the planned development milestones for MCP Gateway, organized by release version with completion status and due dates.
Release Status Summary¶
| Release | Due Date | Completion | Status | Description |
|---|---|---|---|---|
| 1.6.0 | 02 Jun 2026 | 0 % | Open | New MCP Servers and Agents |
| 1.5.0 | 05 May 2026 | 0 % | Open | Documentation, Technical Debt, Bugfixes |
| 1.4.0 | 07 Apr 2026 | 0 % | Open | Technical Debt and Quality |
| 1.3.0 | 03 Mar 2026 | 0 % | Open | Catalog Improvements, A2A Improvements, MCP Standard Review and Sync, Technical Debt |
| 1.2.0 | 03 Feb 2026 | 0 % | Open | Release 1.2.0 - Catalog Enhancements, Ratings, experience and UI |
| 1.1.0 | 06 Jan 2026 | 0 % | Open | Post-GA Testing, Bugfixing, Documentation, Performance and Scale |
| 1.0.0 | 02 Dec 2025 | 4 % | Open | Release 1.0 General Availability & Release Candidate Hardening - stable & audited |
| 0.9.0 | 04 Nov 2025 | 36 % | Open | Interoperability, marketplaces & advanced connectivity |
| 0.8.0 | 07 Oct 2025 | 100 % | Closed | Enterprise Security & Policy Guardrails |
| 0.7.0 | 16 Sep 2025 | 100 % | Closed | Multitenancy and RBAC (Private/Team/Global catalogs), Extended Connectivity, Core Observability & Starter Agents (OpenAI and A2A) |
| 0.6.0 | 19 Aug 2025 | 100 % | Closed | Security, Scale & Smart Automation |
| 0.5.0 | 05 Aug 2025 | 100 % | Closed | Enterprise Operability, Auth, Configuration & Observability |
| 0.4.0 | 22 Jul 2025 | 100 % | Closed | Bugfixes, Security, Resilience (retry with exponential backoff), code quality and technical debt (test coverage, linting, security scans, GitHub Actions, Makefile, Helm improvements) |
| 0.3.0 | 08 Jul 2025 | 100 % | Closed | Annotations and multi-server tool federations |
| 0.2.0 | 24 Jun 2025 | 100 % | Closed | Streamable HTTP, Infra-as-Code, Dark Mode |
| 0.1.0 | 05 Jun 2025 | 100 % | Closed | Initial release |
Release 1.6.0¶
Release 1.6.0 - In Progress (0%)
Due: 02 Jun 2026 | Status: Open New MCP Servers and Agents
✨ Features - Remaining (1)
- ⏳ #548 - [Feature]: GraphQL API Support for Tool Discovery
Release 1.5.0¶
Release 1.5.0 - In Progress (0%)
Due: 05 May 2026 | Status: Open Documentation, Technical Debt, Bugfixes
Release 1.4.0¶
Release 1.4.0 - In Progress (0%)
Due: 07 Apr 2026 | Status: Open Technical Debt and Quality
Release 1.3.0¶
Release 1.3.0 - In Progress (0%)
Due: 03 Mar 2026 | Status: Open Catalog Improvements, A2A Improvements, MCP Standard Review and Sync, Technical Debt
✨ Features - Remaining (1)
- ⏳ #299 - [Feature Request]: A2A Ecosystem Integration & Marketplace (Extends A2A support)
Release 1.2.0¶
Release 1.2.0 - In Progress (0%)
Due: 03 Feb 2026 | Status: Open Release 1.2.0 - Catalog Enhancements, Ratings, experience and UI
✨ Features - Remaining (3)
Release 1.1.0¶
Release 1.1.0 - In Progress (0%)
Due: 06 Jan 2026 | Status: Open Post-GA Testing, Bugfixing, Documentation, Performance and Scale
✨ Features - Remaining (38)
- ⏳ #262 - [Feature Request]: Sample Agent - LangChain Integration (OpenAI & A2A Endpoints)
- ⏳ #263 - [Feature Request]: Sample Agent - CrewAI Integration (OpenAI & A2A Endpoints)
- ⏳ #268 - [Feature Request]: Sample MCP Server - Haskell Implementation ("pandoc-server") (html, docx, pptx, latex conversion)
- ⏳ #269 - [Feature Request]: MCP Server - Go Implementation (LaTeX Service)
- ⏳ #270 - [Feature Request]: MCP Server – Go Implementation ("libreoffice-server")
- ⏳ #293 - [Feature Request]: Intelligent Load Balancing for Redundant MCP Servers
- ⏳ #545 - [Feature Request]: Hot-Reload Configuration Without Restart (move from .env to configuration database table) (draft)
- ⏳ #566 - [Feature Request]: Add support for limiting specific fields to user defined values (draft)
- ⏳ #647 - Configurable caching for tools (draft)
- ⏳ #654 - [Feature Request]: Pre-register checks (mcp server scan) (draft)
- ⏳ #707 - [Feature Request]: Customizable Admin Panel
- ⏳ #871 - Document Langflow integration with MCP Gateway
- ⏳ #872 - Document watsonx.ai integration with MCP Gateway
- ⏳ #873 - Document watsonx Orchestrate integration with MCP Gateway
- ⏳ #874 - Document IBM Decision Intelligence MCP Server integration with MCP Gateway
- ⏳ #875 - Document IBM MQ Server MCP integration with MCP Gateway
- ⏳ #876 - Document IBM ODM MCP Server integration with MCP Gateway
- ⏳ #877 - Document IBM watsonx.data Document Retrieval MCP Server integration with MCP Gateway
- ⏳ #878 - Document IBM Cloud MCP Server integration with MCP Gateway
- ⏳ #879 - Document IBM Cloud Code Engine MCP Server integration with MCP Gateway
- ⏳ #880 - Document IBM Cloud VPC MCP Server integration with MCP Gateway
- ⏳ #881 - Document IBM Instana MCP Server integration with MCP Gateway
- ⏳ #882 - Document IBM Storage Insights MCP Server integration with MCP Gateway
- ⏳ #883 - Document IBM API Connect for GraphQL MCP integration with MCP Gateway
- ⏳ #884 - Document WxMCPServer (webMethods Hybrid Integration) integration with MCP Gateway
- ⏳ #885 - Document Terraform MCP Server integration with MCP Gateway
- ⏳ #886 - Document Vault Radar MCP Server integration with MCP Gateway
- ⏳ #887 - Document DataStax Astra DB MCP Server integration with MCP Gateway
- ⏳ #888 - Document Docling MCP Server integration with MCP Gateway
- ⏳ #889 - Document MCP Composer integration with MCP Gateway
- ⏳ #890 - Document Langflow as MCP Server integration with MCP Gateway
- ⏳ #891 - Document BeeAI Framework integration with MCP Gateway
- ⏳ #913 - Document Atlassian MCP Server integration with MCP Gateway
- ⏳ #914 - Document Box MCP Server integration with MCP Gateway
- ⏳ #915 - Document GitHub MCP Server integration with MCP Gateway
- ⏳ #916 - Document monday.com MCP Server integration with MCP Gateway
- ⏳ #917 - Document Hugging Face MCP Server integration with MCP Gateway
- ⏳ #918 - Document Javadocs.dev MCP Server integration with MCP Gateway
🔧 Chores - Remaining (1)
- ⏳ #253 - [CHORE]: Implement chaos engineering tests for fault tolerance validation (network partitions, service failures)
📚 Documentation - Remaining (1)
- ⏳ #503 - [Docs]: Tutorial: OpenWebUI with Ollama, LiteLLM, MCPO, and MCP Gateway Deployment Guide (Draft)
Release 1.0.0¶
Release 1.0.0 - In Progress (4%)
Due: 02 Dec 2025 | Status: Open Release 1.0 General Availability & Release Candidate Hardening - stable & audited
📋 Epics - Remaining (12)
- ⏳ #1245 - 🔌 Epic: Security Clearance Levels Plugin - Bell-LaPadula MAC Implementation
- ⏳ #1247 - 🔌 Epic: Per-Virtual-Server Plugin Selection with Multi-Level RBAC
- ⏳ #1285 - [Epic]: Fully implement MCP 2025-06-18 compliance across all endpoints
- ⏳ #1286 - [Epic] 🔍 MCP Compliance Checker - Automated Specification Testing Tool
- ⏳ #1293 - [Epic] 🌐 Performance - HTTP/2 & Keep-Alive Transport
- ⏳ #1295 - [Epic] 📦 Performance - Static Asset Caching & CDN
- ⏳ #1296 - [Epic] 💾 Performance - Redis Endpoint Response Caching
- ⏳ #1297 - [Epic] ⚙️ Performance - Production Server Tuning
- ⏳ #1353 - [Epic] 💾 Performance - Database Indexing Optimization
- ⏳ #1354 - [Epic] 🐘 Performance - PostgreSQL Database Tuning & Optimization
- ⏳ #1355 - [Epic] 💾 Document Backup & Restore - Data Protection Strategy
- ⏳ #1358 - 🏷️ Epic: Configurable Tag Restrictions - Whitelist Enforcement
✨ Features - Completed (6)
- ✅ #898 - Sample MCP Server - Go (system-monitor-server)
- ✅ #1019 - [Feature] Authentication Architecture through Plugin System
- ✅ #1138 - [Feature Request]: Support for container builds for s390x
- ✅ #1171 - [Feature]: gRPC-to-MCP Protocol Translation
- ✅ #1203 - [Feature]: Performance Testing & Benchmarking Framework
- ✅ #1219 - [Feature]: Benchmark MCP Server for Load Testing and Performance Analysis
✨ Features - Remaining (73)
- ⏳ #80 - [Feature Request]: Publish a multi-architecture container (including ARM64) support
- ⏳ #114 - [Feature Request]: Connect to Dockerized MCP Servers via STDIO
- ⏳ #123 - [Feature Request]: Dynamic Server Catalog via Rule, Regexp, Tags - or Embedding / LLM-Based Selection
- ⏳ #130 - [Feature Request]: Dynamic LLM-Powered Tool Generation via Prompt
- ⏳ #172 - [Feature Request]: Enable Auto Refresh and Reconnection for MCP Servers in Gateways
- ⏳ #175 - [Feature Request]: Add OpenLLMetry Integration for Observability
- ⏳ #182 - [Feature Request]: Semantic tool auto-filtering
- ⏳ #209 - [Feature Request]: Anthropic Desktop Extensions DTX directory/marketplace
- ⏳ #217 - [Feature Request]: Graceful-Shutdown Hooks for API & Worker Containers (SIGTERM-safe rollouts, DB-pool cleanup, zero-drop traffic)
- ⏳ #218 - [Feature Request]: Prometheus Metrics Instrumentation using prometheus-fastapi-instrumentator
- ⏳ #234 - [Feature Request]: 🧠 Protocol Feature – Elicitation Support (MCP 2025-06-18)
- ⏳ #258 - [Feature Request]: Universal Client Retry Mechanisms with Exponential Backoff & Random Jitter
- ⏳ #264 - [DOCS]: GA Documentation Review & End-to-End Validation Audit
- ⏳ #266 - [Feature Request]: Sample MCP Server - Rust Implementation ("filesystem-server")
- ⏳ #267 - [Feature Request]: Sample MCP Server – Java Implementation ("plantuml-server")
- ⏳ #272 - [Feature Request]: Observability - Pre-built Grafana Dashboards & Loki Log Export
- ⏳ #273 - [Feature Request]: Terraform Module - "mcp-gateway-aws" supporting both EKS and ECS Fargate targets
- ⏳ #274 - [Feature Request]: Terraform Module - "mcp-gateway-azure" supporting AKS and ACA
- ⏳ #275 - [Feature Request]: Terraform Module - "mcp-gateway-gcp" supporting GKE and Cloud Run
- ⏳ #276 - [Feature Request]: Terraform Module – "mcp-gateway-ibm-cloud" supporting IKS, ROKS, Code Engine targets
- ⏳ #284 - [AUTH FEATURE]: LDAP / Active-Directory Integration
- ⏳ #285 - [Feature Request]: Configuration Validation & Schema Enforcement using Pydantic V2 models, config validator cli flag
- ⏳ #286 - [Feature Request]: Dynamic Configuration UI & Admin API (store config in database after db init)
- ⏳ #287 - [Feature Request]: API Path Versioning /v1 and /experimental prefix
- ⏳ #288 - [Feature Request]: MariaDB Support Testing, Documentation, CI/CD (alongside PostgreSQL & SQLite)
- ⏳ #289 - [Feature Request]: Multi-Layer Caching System (Memory + Redis)
- ⏳ #294 - [Feature Request]: Automated MCP Server Testing and Certification
- ⏳ #295 - [Feature Request]: MCP Server Marketplace and Registry
- ⏳ #300 - [Feature Request]: Structured JSON Logging with Correlation IDs
- ⏳ #301 - [Feature Request]: Full Circuit Breakers for Unstable MCP Server Backends support (extend existing healthchecks with half-open state)
- ⏳ #386 - [Feature Request]: Gateways/MCP Servers Page Refresh
- ⏳ #432 - [PERFORMANCE]: Performance Optimization Implementation and Guide for MCP Gateway (baseline)
- ⏳ #505 - [Feature Request]: Add ENV token forwarding management per tool (draft)
- ⏳ #546 - [Feature Request]: Protocol Version Negotiation & Backward Compatibility
- ⏳ #565 - [Feature Request]: Docs for block/goose (draft)
- ⏳ #568 - [Feature]: mTLS support (gateway and plugins), configurable client require TLS cert, and certificate setup for MCP Servers with private CA
- ⏳ #683 - [Feature Request]: Debug headers and passthrough headers, e.g. X-Tenant-Id, X-Trace-Id, Authorization for time server (go) (draft)
- ⏳ #706 - [Feature Request]: ABAC Virtual Server Support
- ⏳ #732 - [Feature Request]: Enhance Handling of Long Tool Descriptions
- ⏳ #738 - [Feature Request]: Configuration Database for Dynamic Settings Management
- ⏳ #743 - [Feature Request]: Enhance Server Creation/Editing UI for Prompt and Resource Association
- ⏳ #751 - [Feature] MCP Server - Implement MCP Evaluation Benchmarks Suite
- ⏳ #756 - [Feature Request]: REST Passthrough APIs with Pre/Post Plugins (JSONPath and filters)
- ⏳ #758 - Implement missing MCP protocol methods
- ⏳ #782 - [Feature Request]: OAuth Enhancement following PR 768
- ⏳ #848 - [Feature Request]: Allow same prompt name when adding two different mcp server
- ⏳ #892 - Update and test IBM Cloud deployment documentation and automation
- ⏳ #896 - Add Prompt Authoring Tools Category to MCP Eval Server
- ⏳ #897 - Sample MCP Server - Go (database-query-server)
- ⏳ #899 - Sample MCP Server - Python (ml-inference-server)
- ⏳ #901 - Sample MCP Server - Rust (crypto-tools-server)
- ⏳ #902 - Sample MCP Server - Rust (performance-benchmark-server)
- ⏳ #903 - Sample MCP Server - TypeScript (web-automation-server)
- ⏳ #904 - Sample MCP Server - TypeScript (real-time-collaboration-server)
- ⏳ #905 - Create IBM Granite Language Models MCP Server
- ⏳ #906 - Create IBM Granite Vision Models MCP Server
- ⏳ #907 - Create IBM Granite Speech Models MCP Server
- ⏳ #908 - Create IBM Granite Time Series Models MCP Server
- ⏳ #909 - Create IBM Granite Guardian Safety Models MCP Server
- ⏳ #910 - Create IBM Granite Geospatial Models MCP Server
- ⏳ #911 - Create IBM Granite Embedding Models MCP Server
- ⏳ #912 - Sample Agent - IBM BeeAI Framework Integration (OpenAI & A2A Endpoints)
- ⏳ #919 - Sample MCP Server - Python (qr-code-server)
- ⏳ #921 - Sample MCP Server - Python (weather-data-server)
- ⏳ #932 - [Feature Request]: Air-Gapped Environment Support
- ⏳ #950 - Session Management & Tool Invocation with Gateway vs Direct MCP Client–Server
- ⏳ #974 - [Feature Request]: Make users change default admin passwords and secrets for production deployments.
- ⏳ #975 - Feature Request: Implement Session Persistence & Pooling for Improved Performance and State Continuity
- ⏳ #1042 - [Feature Request]: Implementation Plan for Root Directory
- ⏳ #1122 - [Feature Request]: Investigate Bearer Token Validation in MCP/Forge with Keycloak JWT
- ⏳ #1136 - [Feature Request]: Feature Request: Add depends_on key in plugin configurations
- ⏳ #1140 - [Feature Request]: Reduce Complexity in Plugin Configuration Framework
- ⏳ #1282 - [Feature]🔐 Configurable Password Expiration with Forced Password Change on Login
🔒 Security - Remaining (11)
- ⏳ #221 - [SECURITY FEATURE]: Gateway-Level Input Validation & Output Sanitization (prevent traversal)
- ⏳ #230 - [SECURITY FEATURE]: Cryptographic Request & Response Signing
- ⏳ #257 - [SECURITY FEATURE]: Gateway-Level Rate Limiting, DDoS Protection & Abuse Detection
- ⏳ #535 - [SECURITY FEATURE]: Audit Logging System
- ⏳ #536 - [SECURITY FEATURE]: Generic IP-Based Access Control (allowlist)
- ⏳ #537 - [SECURITY FEATURE]: Simple Endpoint Feature Flags (selectively enable or disable tools, resources, prompts, servers, gateways, roots)
- ⏳ #538 - [SECURITY FEATURE] Content Size & Type Security Limits for Resources & Prompts
- ⏳ #539 - [SECURITY FEATURE]: Tool Execution Limits & Resource Controls
- ⏳ #541 - [SECURITY FEATURE]: Enhanced Session Management for Admin UI
- ⏳ #542 - [SECURITY FEATURE]: Helm Chart - Enterprise Secrets Management Integration (Vault)
- ⏳ #543 - [SECURITY FEATURE]: CSRF Token Protection System
🔧 Chores - Remaining (33)
- ⏳ #211 - [CHORE]: Achieve Zero Static-Type Errors Across All Checkers (mypy, ty, pyright, pyrefly)
- ⏳ #212 - [CHORE]: Achieve zero flagged SonarQube issues
- ⏳ #216 - [CHORE]: Add spec-validation targets and make the OpenAPI build go green
- ⏳ #222 - [CHORE]: Helm chart build Makefile with lint and values.schema.json validation + CODEOWNERS, CHANGELOG.md, .helmignore and CONTRIBUTING.md
- ⏳ #223 - [CHORE]: Helm Chart Test Harness & Red Hat chart-verifier
- ⏳ #250 - [CHORE]: Implement automatic API documentation generation using mkdocstrings and update Makefile
- ⏳ #251 - [CHORE]: Automatic performance testing and tracking for every build (hey) including SQLite and Postgres / Redis configurations
- ⏳ #252 - [CHORE]: Establish database migration testing pipeline with rollback validation across SQLite, Postgres, and Redis
- ⏳ #255 - [CHORE]: Implement comprehensive Playwright test automation for the entire MCP Gateway Admin UI with Makefile targets and GitHub Actions
- ⏳ #259 - [CHORE]: SAST (Semgrep) and DAST (OWASP ZAP) automated security testing Makefile targets and GitHub Actions
- ⏳ #260 - [CHORE]: Manual security testing plan and template for release validation and production deployments
- ⏳ #261 - [CHORE]: Implement 90% Test Coverage Quality Gate and automatic badge and coverage html / markdown report publication
- ⏳ #281 - [CHORE]: Set up contract testing with Pact (pact-python) including Makefile and GitHub Actions targets
- ⏳ #290 - [CHORE]: Enhance Gateway Tuning Guide with PostgreSQL Deep-Dive
- ⏳ #291 - [CHORE]: Comprehensive Scalability & Soak-Test Harness (Long-term Stability & Load) - locust, pytest-benchmark, smocker mocked MCP servers
- ⏳ #292 - [CHORE]: Enable AI Alliance Analytics Stack Integration
- ⏳ #307 - [CHORE]: GitHub Actions to build docs, with diagrams and test report, and deploy to GitHub Pages using MkDocs on every push to main
- ⏳ #312 - [CHORE]: End-to-End MCP Gateway Stack Testing Harness (mcpgateway, translate, wrapper, mcp-servers)
- ⏳ #318 - [CHORE]: Publish Agents and Tools that leverage codebase and templates (draft)
- ⏳ #341 - [CHORE]: Enhance UI security with DOMPurify and content sanitization
- ⏳ #377 - [CHORE]: Fix PostgreSQL Volume Name Conflicts in Helm Chart (draft)
- ⏳ #391 - [CHORE]: Setup SonarQube quality gate (draft)
- ⏳ #398 - [CHORE]: Enforce pre-commit targets for doctest coverage, pytest coverage, pylint score 10/10, flake8 pass and add badges
- ⏳ #402 - [CHORE]: Add post-deploy step to helm that configures the Time Server as a Gateway (draft)
- ⏳ #407 - [CHORE]: Improve pytest and plugins (draft)
- ⏳ #408 - [CHORE]: Add normalize script to pre-commit hooks (draft)
- ⏳ #414 - [CHORE]: Restructure Makefile targets (ex: move grype to container scanning section), or have a dedicated security scanning section
- ⏳ #574 - [CHORE]: Run pyupgrade to upgrade python syntax (draft)
- ⏳ #589 - [CHORE]: generating build provenance attestations for workflow artifacts (draft)
- ⏳ #595 - [CHORE] Investigate potential migration to UUID7 (draft)
- ⏳ #674 - [CHORE]: Automate release management process (draft)
- ⏳ #806 - [CHORE]: Bulk Import – Missing error messages and registration feedback in UI
- ⏳ #1290 - [CHORE] Remove redundant import checkers: importchecker and unimport
📚 Documentation - Remaining (1)
- ⏳ #22 - [Docs]: Add BeeAI Framework client integration (Python & TypeScript)
Release 0.9.0¶
Release 0.9.0 - Completed (100%)
Due: 09 Nov 2025 | Status: Closed Interoperability, marketplaces & advanced connectivity
📋 Epics - Completed (4)
✨ Features - Completed (16)
- ✅ #277 - [Feature Request]: Authentication & Authorization - GitHub SSO Integration Tutorial (Depends on #220)
- ✅ #835 - [Feature Request]: Adding Custom annotation for the tools
- ✅ #869 - [Question]: 0.7.0 Release timeline
- ✅ #967 - UI Gaps in Multi-Tenancy Support - Visibility fields missing for most resource types
- ✅ #969 - Backend Multi-Tenancy Issues - Critical bugs and missing features
- ✅ #1020 - [Feature] Edit Button Functionality - A2A
- ✅ #1093 - [Feature Request]: Role-Based Access Control (RBAC) - support generic oAuth provider or ldap provider
- ✅ #1111 - [Feature Request]: Support application/x-www-form-urlencoded Requests in MCP Gateway UI for OAuth2 / Keycloak Integration
- ✅ #1137 - [Feature Request]: Add missing hooks to OPA plugin
- ✅ #1197 - [Feature]: Support Bundle Generation - Automated Diagnostics Collection
- ✅ #1200 - [Feature Request]: In built MCP client - LLM Chat service for virtual servers with agentic capabilities and MCP Enabled Tool Orchestration
- ✅ #1209 - [Feature]: Finalize RBAC / ABAC implementation to Implement Ownership Checks for Public Resources
- ✅ #1228 - [Feature] Show system statistics in metrics page
- ✅ #1239 - LLMChat Multi-Worker: Add Documentation and Integration Tests (PR #1236 Follow-up)
- ✅ #1336 - [Feature Request]: Add toggles to password/sensitive textboxes to mask/unmask the input value.
- ✅ #1348 - [Feature Request]: Add support for IBM Watsonx.ai LLM provider
🐛 Bugs - Completed (18)
- ✅ #409 - [Bug]: Add configurable limits for data cleaning / XSS prevention in .env.example and helm
- ✅ #448 - [Bug]:MCP server with custom base path "/api" instead of "mcp" or "sse" is not working
- ✅ #625 - [Bug]: Gateway unable to register gateway or call tools on MacOS
- ✅ #861 - [Bug]: Passthrough header parameters not persisted to database
- ✅ #922 - [Bug]: In 0.6.0 Version, IFraming the admin UI is not working.
- ✅ #926 - [BUG] Bootstrap fails to assign platform_admin role due to foreign key constraint violation
- ✅ #945 - [Bug]: Unique Constraint is not allowing Users to create servers/tools/resources/prompts with Names already used by another User
- ✅ #946 - [Bug]: Alembic migrations fails in docker compose setup
- ✅ #1024 - [Bug]: plugin that is using tool_prefetch hook cannot access PASSTHROUGH_HEADERS, tags for an MCP Server Need MCP-GW restart
- ✅ #1092 - [Bug]: after issue 1078 change, how to add X-Upstream-Authorization header when click Authorize in admin UI
- ✅ #1094 - [Bug]: Creating an MCP OAUTH2 server fails if using API.
- ✅ #1098 - [Bug]:Unable to see request payload being sent
- ✅ #1222 - [Bug]: Missing name conflict detection for private visibility resources
- ✅ #1248 - [Bug]: RBAC Vulnerability: Unauthorized Access to Resource Status Toggling
- ✅ #1254 - [Bug]: JWT jti mismatch between token and database record
- ✅ #1258 - [Bug]: MCP Tool outputSchema Field is Stripped During Discovery
- ✅ #1261 - [Bug]: API Token Expiry Issue: UI Configuration overridden by default env Variable
- ✅ #1381 - [Bug]: Resource view error - mime type handling for resource added via mcp server
Release 0.8.0 - Enterprise Security & Policy Guardrails¶
Release 0.8.0 - Completed (100%)
Due: 07 Oct 2025 | Status: Closed Enterprise Security & Policy Guardrails
✨ Completed Features (17)
- ✅ #1176 - [Feature Request]: Implement Team-Level Scoping for API Tokens
- ✅ #1043 - [Feature]: Sample MCP Server - Implement Pandoc MCP server in Go
- ✅ #1035 - [Feature Request]: Add "Team" Column to All Admin UI Tables (Tools, Gateway Server, Virtual Servers, Prompts, Resources)
- ✅ #979 - [Feature Request]: OAuth Dynamic Client Registration
- ✅ #964 - Support dynamic environment variable injection in mcpgateway.translate for STDIO MCP servers
- ✅ #920 - Sample MCP Server - Go (calculator-server)
- ✅ #900 - Sample MCP Server - Python (data-analysis-server)
- ✅ #699 - [Feature]: Metrics Enhancement (export all data, capture all metrics, fix last used timestamps, UI improvements)
- ✅ #298 - [Feature Request]: A2A Initial Support - Add A2A Servers as Tools
- ✅ #243 - [Feature Request]: a2a compatibility?
- ✅ #229 - [SECURITY FEATURE]: Guardrails - Input/Output Sanitization & PII Masking
- ✅ #1045 - Sample MCP Server - Python (docx-server)
- ✅ #1052 - Sample MCP Server - Python (chunker-server)
- ✅ #1053 - Sample MCP Server - Python (code-splitter-server)
- ✅ #1054 - Sample MCP Server - Python (xlsx-server)
- ✅ #1055 - Sample MCP Server - Python (libreoffice-server)
- ✅ #1056 - Sample MCP Server - Python (csv-pandas-chat-server)
🐛 Completed Bugs (16)
- ✅ #1178 - [Bug]: The header in UI overlaps with all the modals
- ✅ #1117 - [Bug]:Login not working with 0.7.0 version
- ✅ #1109 - [Bug]:MCP Gateway UI OAuth2 Integration Fails with Keycloak Due to Missing x-www-form-urlencoded Support
- ✅ #1104 - [Bug]: X-Upstream-Authorization Header Not Working When Auth Type is None
- ✅ #1101 - [Bug]:login issue
- ✅ #1078 - [Bug]: OAuth Token Multi-Tenancy Support: User-Specific Token Handling Required
- ✅ #1048 - [Bug]: Login issue - Serving over HTTP requires SECURE_COOKIES=false (warning required)
- ✅ #1046 - [Bug]: pass-through headers are not functioning as expected
- ✅ #1039 - [Bug]:Update Gateway fails
- ✅ #1025 - [Bug]:After edit/save of an MCP Server with OAUTh2 Authentication I need to also fetch tools.
- ✅ #1022 - [Bug] "Join Request" button shows no pending request for team membership
- ✅ #959 - [Bug]: Unable to Re-add Team Member Due to Unique Constraint on (team_id, user_email)
- ✅ #949 - [Bug]: Tool invocation for an MCP server authorized by OAUTH2 fails
- ✅ #948 - [Bug]:MCP OAUTH2 authenticate server is shown as offline after is added
- ✅ #941 - [Bug]: Access Token scoping not working
- ✅ #939 - [Bug]: Missing Document links in SSO page for Team/RBAC management
🔧 Completed Chores (3)
- ✅ #931 - [Bug]: Helm install does not work when kubeVersion has vendor specific suffix
- ✅ #867 - [Bug]: update_gateway does not persist passthrough_headers field
- ✅ #845 - [Bug]:2025-08-28 05:47:06,733 - mcpgateway.services.gateway_service - ERROR - FileLock health check failed: can't start new thread
📚 Completed Documentation (3)
🔌 Completed Plugin Features (29)
- ✅ #1077 - [Plugin] Create ClamAV External Plugin using Plugin Framework
- ✅ #1076 - [Plugin] Create Summarizer Plugin using Plugin Framework
- ✅ #1075 - [Plugin] Create Watchdog Plugin using Plugin Framework
- ✅ #1074 - [Plugin] Create Timezone Translator Plugin using Plugin Framework
- ✅ #1073 - [Plugin] Create Privacy Notice Injector Plugin using Plugin Framework
- ✅ #1072 - [Plugin] Create License Header Injector Plugin using Plugin Framework
- ✅ #1071 - [Plugin] Create Response Cache by Prompt Plugin using Plugin Framework
- ✅ #1070 - [Plugin] Create Circuit Breaker Plugin using Plugin Framework
- ✅ #1069 - [Plugin] Create Citation Validator Plugin using Plugin Framework
- ✅ #1068 - [Plugin] Create Code Formatter Plugin using Plugin Framework
- ✅ #1067 - [Plugin] Create AI Artifacts Normalizer Plugin using Plugin Framework
- ✅ #1066 - [Plugin] Create Robots License Guard Plugin using Plugin Framework
- ✅ #1065 - [Plugin] Create SQL Sanitizer Plugin using Plugin Framework
- ✅ #1064 - [Plugin] Create Harmful Content Detector Plugin using Plugin Framework
- ✅ #1063 - [Plugin] Create Safe HTML Sanitizer Plugin using Plugin Framework
- ✅ #1005 - [Plugin] Create VirusTotal Checker Plugin using Plugin Framework
- ✅ #1004 - [Plugin] Create URL Reputation Plugin using Plugin Framework
- ✅ #1003 - [Plugin] Create Schema Guard Plugin using Plugin Framework
- ✅ #1002 - [Plugin] Create Retry with Backoff Plugin using Plugin Framework
- ✅ #1001 - [Plugin] Create Rate Limiter Plugin using Plugin Framework
- ✅ #1000 - [Plugin] Create Output Length Guard Plugin using Plugin Framework
- ✅ #999 - [Plugin] Create Markdown Cleaner Plugin using Plugin Framework
- ✅ #998 - [Plugin] Create JSON Repair Plugin using Plugin Framework
- ✅ #997 - [Plugin] Create HTML to Markdown Plugin using Plugin Framework
- ✅ #996 - [Plugin] Create File Type Allowlist Plugin using Plugin Framework
- ✅ #995 - [Plugin] Create Code Safety Linter Plugin using Plugin Framework
- ✅ #994 - [Plugin] Create Cached Tool Result Plugin using Plugin Framework
- ✅ #895 - [Plugin] Create Header Injector Plugin using Plugin Framework
- ✅ #894 - [Plugin] Create Secrets Detection Plugin using Plugin Framework
- ✅ #893 - [Plugin] Create JSON Schema Validator Plugin using Plugin Framework
📦 Completed Sample Servers (10)
- ✅ #1062 - Sample MCP Server - Python (url-to-markdown-server)
- ✅ #1061 - Sample MCP Server - Python (python-sandbox-server)
- ✅ #1060 - Sample MCP Server - Python (latex-server)
- ✅ #1059 - Sample MCP Server - Python (graphviz-server)
- ✅ #1058 - Sample MCP Server - Python (mermaid-server)
- ✅ #1057 - Sample MCP Server - Python (plotly-server)
- ✅ #841 - [Bug]: For A2A Agent, tools are not getting listed under Global Tools
- ✅ #839 - [Bug]:Getting 401 un-authorized on Testing tools in "In-Cognito" mode.
- ✅ #836 - [Bug]: Server Tags Not Propagated to Tools via /tools Endpoint
Release 0.7.0 - Multitenancy and RBAC (Private/Team/Global catalogs), Extended Connectivity, Core Observability & Starter Agents (OpenAI and A2A)¶
Release 0.7.0 - Completed (100%)
Due: 16 Sep 2025 | Status: Closed Multitenancy and RBAC (Private/Team/Global catalogs), Extended Connectivity, Core Observability & Starter Agents (OpenAI and A2A)
✨ Completed Features (21)
- ✅ #989 - [Feature Request]: Sample MCP Server - Python PowerPoint Editor (python-pptx)
- ✅ #986 - Plugin Request: Implement Argument Normalizer Plugin (Native)
- ✅ #928 - Migrate container base images from UBI9 to UBI10 and Python from 3.11 to 3.12
- ✅ #925 - Add MySQL database support to MCP Gateway
- ✅ #860 - [EPIC]: Complete Enterprise Multi-Tenancy System with Team-Based Resource Scoping
- ✅ #859 - [Feature Request]: Authentication & Authorization - IBM Security Verify Enterprise SSO Integration (Depends on #220)
- ✅ #846 - [Bug]: Editing server converts hex UUID to hyphenated UUID format, lacks error handling
- ✅ #844 - [Bug]: Creating a new virtual server with a custom UUID, removes the "-" hyphens from the UUID field.
- ✅ #831 - [Bug]: Newly added or deleted tools are not reflected in Global Tools tab after server reactivation
- ✅ #822 - [Bug]: Incorrect _sleep_with_jitter Method Call
- ✅ #820 - [Bug]: Unable to create a new server with custom UUID
- ✅ #605 - [Feature Request]: Access to remote MCP Servers/Tools via OAuth on behalf of Users
- ✅ #570 - [Feature Request]: Word wrap in codemirror
- ✅ #544 - [SECURITY FEATURE]: Database-Backed User Authentication with Argon2id (replace BASIC auth)
- ✅ #491 - [Feature Request]: UI Keyboard shortcuts
- ✅ #426 - [SECURITY FEATURE]: Configurable Password and Secret Policy Engine
- ✅ #283 - [SECURITY FEATURE]: Role-Based Access Control (RBAC) - User/Team/Global Scopes for full multi-tenancy support
- ✅ #282 - [SECURITY FEATURE]: Per-Virtual-Server API Keys with Scoped Access
- ✅ #278 - [Feature Request]: Authentication & Authorization - Google SSO Integration Tutorial (Depends on #220)
- ✅ #220 - [AUTH FEATURE]: Authentication & Authorization - SSO + Identity-Provider Integration
- ✅ #87 - [Feature Request]: Epic: Secure JWT Token Catalog with Per-User Expiry and Revocation
🐛 Completed Bugs (5)
📚 Completed Documentation (4)
- ✅ #818 - [Docs]: Readme ghcr.io/ibm/mcp-context-forge:0.6.0 image still building
- ✅ #323 - [Docs]: Add Developer Guide for using fast-time-server via JSON-RPC commands using curl or stdio
- ✅ #19 - [Docs]: Add Developer Guide for using MCP via the CLI (curl commands, JSON-RPC)
- ✅ #834 - [Bug]: Existing tool configurations are not updating after changes to the MCP server configuration.
Release 0.6.0 - Security, Scale & Smart Automation¶
Release 0.6.0 - Completed (100%)
Due: 19 Aug 2025 | Status: Closed Security, Scale & Smart Automation
✨ Completed Features (30)
- ✅ #773 - [Feature]: add support for external plugins
- ✅ #749 - [Feature Request]: MCP Reverse Proxy - Bridge Local Servers to Remote Gateways
- ✅ #737 - [Feature Request]: Bulk Tool Import
- ✅ #735 - [Epic]: Vendor Agnostic OpenTelemetry Observability Support
- ✅ #727 - [Feature]: Phoenix Observability Integration plugin
- ✅ #720 - [Feature]: Add CLI for authoring and packaging plugins
- ✅ #708 - [Feature Request]: MCP Elicitation (v2025-06-18)
- ✅ #705 - [Feature Request]: Option to completely remove Bearer token auth to MCP gateway
- ✅ #690 - [Feature] Make SSE Keepalive Events Configurable
- ✅ #682 - [Feature]: Add tool hooks (tool_pre_invoke / tool_post_invoke) to plugin system
- ✅ #673 - [ARCHITECTURE] Identify Next Steps for Plugin Development
- ✅ #672 - [CHORE]: Part 2: Replace Raw Errors with Friendly Messages in main.py
- ✅ #668 - [Feature Request]: Add Null Checks and Improve Error Handling in Frontend Form Handlers (admin.js)
- ✅ #586 - [Feature Request]: Tag support with editing and validation across all APIs endpoints and UI (tags)
- ✅ #540 - [SECURITY FEATURE]: Configurable Well-Known URI Handler including security.txt and robots.txt
- ✅ #533 - [SECURITY FEATURE]: Add Additional Configurable Security Headers to APIs for Admin UI
- ✅ #492 - [Feature Request]: Change UI ID field name to UUID
- ✅ #452 - [Bug]: integrationType should only support REST, not MCP (Remove Integration Type: MCP)
- ✅ #405 - [Bug]: Fix the go time server annotation (it shows as destructive)
- ✅ #404 - [Feature Request]: Add resources and prompts/prompt templates to time server
- ✅ #380 - [Feature Request]: REST Endpoints for Go fast-time-server
- ✅ #368 - [Feature Request]: Enhance Metrics Tab UI with Virtual Servers and Top 5 Performance Tables
- ✅ #364 - [Feature Request]: Add Log File Support to MCP Gateway
- ✅ #344 - [CHORE]: Implement additional security headers and CORS configuration
- ✅ #320 - [Feature Request]: Update Streamable HTTP to fully support Virtual Servers
- ✅ #319 - [Feature Request]: AI Middleware Integration / Plugin Framework for extensible gateway capabilities
- ✅ #317 - [CHORE]: Script to add relative file path header to each file and verify top level docstring
- ✅ #315 - [CHORE] Check SPDX headers Makefile and GitHub Actions target - ensure all files have File, Author(s) and SPDX headers
- ✅ #313 - [DESIGN]: Architecture Decisions and Discussions for AI Middleware and Plugin Framework (Enables #319)
- ✅ #208 - [AUTH FEATURE]: HTTP Header Passthrough (forward headers to MCP server)
🐛 Completed Bugs (22)
- ✅ #774 - [Bug]: Tools Annotations not working and need specificity for mentioning annotations
- ✅ #765 - [Bug]: illegal IP address string passed to inet_aton during discovery process
- ✅ #753 - [BUG] Tool invocation returns 'Invalid method' error after PR #746
- ✅ #744 - [BUG] Gateway fails to connect to services behind CDNs/load balancers due to DNS resolution
- ✅ #741 - [Bug]: Enhance Server Creation/Editing UI for Prompt and Resource Association
- ✅ #728 - [Bug]: Streamable HTTP Translation Feature: Connects but Fails to List Tools, Resources, or Support Tool Calls
- ✅ #716 - [Bug]: Resources and Prompts not displaying in Admin Dashboard while Tools are visible
- ✅ #704 - [Bug]: Virtual Servers don't actually work as advertised v0.5.0
- ✅ #696 - [Bug]: SSE Tool Invocation Fails After Integration Type Migration post PR #678
- ✅ #694 - [BUG]: Enhanced Validation Missing in GatewayCreate
- ✅ #689 - Getting "Unknown SSE event: keepalive" when trying to use virtual servers
- ✅ #685 - [Bug]: Multiple Fixes and improved security for HTTP Header Passthrough Feature
- ✅ #666 - [Bug]:Vague/Unclear Error Message "Validation Failed" When Adding a REST Tool
- ✅ #661 - [Bug]: Database migration runs during doctest execution
- ✅ #649 - [Bug]: Duplicate Gateway Registration with Equivalent URLs Bypasses Uniqueness Check
- ✅ #646 - [Bug]: MCP Server/Federated Gateway Registration is failing
- ✅ #560 - [Bug]: Can't list tools when running inside of a docker
- ✅ #557 - [BUG] Cleanup tool descriptions to remove newlines and truncate text
- ✅ #526 - [Bug]: Unable to add multiple headers when adding a gateway through UI (draft)
- ✅ #520 - [Bug]: Resource mime-type is always stored as text/plain
- ✅ #518 - [Bug]: Runtime error from Redis when multiple sessions exist
- ✅ #417 - [Bug]: Intermittent doctest failure in /mcpgateway/cache/resource_cache.py:7
🔧 Completed Chores (8)
- ✅ #481 - [Bug]: Intermittent test_resource_cache.py::test_expiration - AssertionError: assert 'bar' is None (draft)
- ✅ #480 - [Bug]: Alembic treated as first party dependency by isort
- ✅ #479 - [Bug]: Update make commands for alembic
- ✅ #478 - [Bug]: Alembic migration is broken
- ✅ #436 - [Bug]: Verify content length using the content itself when the content-length header is absent.
- ✅ #280 - [CHORE]: Add mutation testing with mutmut for test quality validation
- ✅ #256 - [CHORE]: Implement comprehensive fuzz testing automation and Makefile targets (hypothesis, atheris, schemathesis , RESTler)
- ✅ #254 - [CHORE]: Async Code Testing and Performance Profiling Makefile targets (flake8-async, cprofile, snakeviz, aiomonitor)
📚 Completed Documentation (4)
- ✅ #306 - Quick Start (manual install) gunicorn fails
- ✅ #186 - [Feature Request]: Granular Configuration Export & Import (via UI & API)
- ✅ #185 - [Feature Request]: Portable Configuration Export & Import CLI (registry, virtual servers and prompts)
- ✅ #94 - [Feature Request]: Transport-Translation Bridge (
mcpgateway.translate) any to any protocol conversion cli tool
❓ Completed Questions (3)
📦 Completed Sample Servers (3)
Release 0.5.0 - Enterprise Operability, Auth, Configuration & Observability¶
Release 0.5.0 - Completed (100%)
Due: 05 Aug 2025 | Status: Closed Enterprise Operability, Auth, Configuration & Observability
✨ Completed Features (4)
- ✅ #663 - [Feature Request]: Add basic auth support for API Docs
- ✅ #623 - [Feature Request]: Display default values from input_schema in test tool screen
- ✅ #506 - [Feature Request]: New column for "MCP Server Name" in Global tools/resources etc
- ✅ #392 - [Feature Request]: UI checkbox selection for servers, tools, and resources
🐛 Completed Bugs (20)
- ✅ #631 - [Bug]: Inconsistency in acceptable length of Tool Names for tools created via UI and programmatically
- ✅ #630 - [Bug]: Gateway update fails silently in UI, backend throws ValidationInfo error
- ✅ #622 - [Bug]: Test tool UI passes boolean inputs as on/off instead of true/false
- ✅ #620 - [Bug]: Test tool UI passes array inputs as strings
- ✅ #613 - [Bug]: Fix lint-web issues in admin.js
- ✅ #610 - [Bug]: Edit tool in Admin UI sends invalid "STREAMABLE" value for Request Type
- ✅ #603 - [Bug]: Unexpected error when registering a gateway with the same name.
- ✅ #601 - [Bug]: APIs for gateways in admin and main do not mask auth values
- ✅ #598 - [Bug]: Long input names in tool creation reflected back to user in error message
- ✅ #591 - [Bug] Edit Prompt Fails When Template Field Is Empty
- ✅ #584 - [Bug]: Can't register Github MCP Server in the MCP Registry
- ✅ #579 - [Bug]: Edit tool update fail integration_type="REST"
- ✅ #578 - [Bug]: Adding invalid gateway URL does not return an error immediately
- ✅ #521 - [Bug]: Gateway ID returned as null by Gateway Create API
- ✅ #507 - [Bug]: Makefile missing .PHONY declarations and other issues
- ✅ #434 - [Bug]: Logs show"Invalid HTTP request received"
- ✅ #430 - [Bug]: make serve doesn't check if I'm already running an instance (run-gunicorn.sh) letting me start the server multiple times
- ✅ #423 - [Bug]: Redundant Conditional Expression in Content Validation
- ✅ #373 - [Bug]: Clarify Difference Between "Reachable" and "Available" Status in Version Info
- ✅ #357 - [Bug]: Improve consistency of displaying error messages
🔒 Completed Security (1)
- ✅ #425 - [SECURITY FEATURE]: Make JWT Token Expiration Mandatory when REQUIRE_TOKEN_EXPIRATION=true (depends on #87)
🔧 Completed Chores (9)
- ✅ #638 - [CHORE]: Add Makefile and GitHub Actions support for Snyk (test, code-test, container-test, helm charts)
- ✅ #615 - [CHORE]: Add pypi package linters: check-manifest pyroma and verify target to GitHub Actions
- ✅ #590 - [CHORE]: Integrate DevSkim static analysis tool via Makefile
- ✅ #410 - [CHORE]: Add
make lint filename|dirnametarget to Makefile - ✅ #403 - [CHORE]: Add time server (and configure it post-deploy) to docker-compose.yaml
- ✅ #397 - [CHORE]: Migrate run-gunicorn-v2.sh to run-gunicorn.sh and have a single file (improved startup script with configurable flags)
- ✅ #390 - [CHORE]: Add lint-web to CI/CD and add additional linters to Makefile (jshint jscpd markuplint)
- ✅ #365 - [CHORE]: Fix Database Migration Commands in Makefile
- ✅ #363 - [CHORE]: Improve Error Messages - Replace Raw Technical Errors with User-Friendly Messages
Release 0.4.0 - Bugfixes, Security, Resilience (retry with exponential backoff), code quality and technical debt (test coverage, linting, security scans, GitHub Actions, Makefile, Helm improvements)¶
Release 0.4.0 - Completed (100%)
Due: 22 Jul 2025 | Status: Closed Bugfixes, Security, Resilience (retry with exponential backoff), code quality and technical debt (test coverage, linting, security scans, GitHub Actions, Makefile, Helm improvements)
✨ Completed Features (9)
- ✅ #456 - [Feature Request]: HTTPX Client with Smart Retry and Backoff Mechanism
- ✅ #351 - CHORE: Checklist for complete End-to-End Validation Testing for All API Endpoints, UI and Data Validation
- ✅ #340 - [Security]: Add input validation for main API endpoints (depends on #339 /admin API validation)
- ✅ #339 - [Security]: Add input validation for /admin endpoints
- ✅ #338 - [Security]: Eliminate all lint issues in web stack
- ✅ #336 - [Security]: Implement output escaping for user data in UI
- ✅ #233 - [Feature Request]: Contextual Hover-Help Tooltips in UI
- ✅ #181 - [Feature Request]: Test MCP Server Connectivity Debugging Tool
- ✅ #177 - [Feature Request]: Persistent Admin UI Filter State
🐛 Completed Bugs (26)
- ✅ #508 - [BUG]: "PATCH" in global tools while creating REST API integration through UI
- ✅ #495 - [Bug]: test_admin_tool_name_conflict creates record in actual db
- ✅ #476 - [Bug]:UI Does Not Show Error for Duplicate Server Name
- ✅ #472 - [Bug]: auth_username and auth_password not getting set in GET /gateways/
API - ✅ #471 - [Bug]: _populate_auth not working
- ✅ #424 - [Bug]: MCP Gateway Doesn't Detect HTTPS/TLS Context or respect X-Forwarded-Proto when using Federation
- ✅ #419 - [Bug]: Remove unused lock_file_path from config.py (trips up bandit)
- ✅ #416 - [Bug]: Achieve 100% bandit lint for version.py (remove git command from version.py, tests and UI and rely on semantic version only)
- ✅ #412 - [Bug]: Replace assert statements with explicit error handling in translate.py and fix bandit lint issues
- ✅ #396 - [Bug]: Test server URL does not work correctly
- ✅ #387 - [Bug]: Respect GATEWAY_TOOL_NAME_SEPARATOR for gateway slug
- ✅ #384 - [Bug]: Push image to GHCR incorrectly runs in PR
- ✅ #382 - [Bug]: API incorrectly shows version, use semantic version from init
- ✅ #378 - [Bug] Fix Unit Tests to Handle UI-Disabled Mode
- ✅ #374 - [Bug]: Fix "metrics-loading" Element Not Found Console Warning
- ✅ #371 - [Bug]: Fix Makefile to let you pick docker or podman and work consistently with the right image name
- ✅ #369 - [Bug]: Fix Version Endpoint to Include Semantic Version (Not Just Git Revision)
- ✅ #367 - [Bug]: Fix "Test Server Connectivity" Feature in Admin UI
- ✅ #366 - [Bug]: Fix Dark Theme Visibility Issues in Admin UI
- ✅ #361 - [Bug]: Prompt and RPC Endpoints Accept XSS Content Without Validation Error
- ✅ #359 - [BUG]: Gateway validation accepts invalid transport types
- ✅ #356 - [Bug]: Annotations not editable
- ✅ #355 - [Bug]: Large empty space after line number in text boxes
- ✅ #354 - [Bug]: Edit screens not populating fields
- ✅ #352 - [Bug]: Resources - All data going into content
- ✅ #213 - [Bug]:Can't use
STREAMABLEHTTP
🔒 Completed Security (1)
- ✅ #552 - [SECURITY CHORE]: Add comprehensive input validation security test suite
🔧 Completed Chores (13)
- ✅ #558 - [CHORE]: Ignore tests/security/test_input_validation.py in pre-commit for bidi-controls
- ✅ #499 - [CHORE]: Add nodejsscan security scanner
- ✅ #467 - [CHORE]: Achieve 100% docstring coverage (make interrogate) - currently at 96.3%
- ✅ #433 - [CHORE]: Fix all Makefile targets to work without pre-activated venv and check for OS depends
- ✅ #421 - [CHORE]: Achieve zero flagged Bandit issues
- ✅ #415 - [CHORE]: Additional Python Security Scanners
- ✅ #399 - [Test]: Create e2e acceptance test docs
- ✅ #375 - [CHORE]: Fix yamllint to Ignore node_modules Directory
- ✅ #362 - [CHORE]: Implement Docker HEALTHCHECK
- ✅ #305 - [CHORE]: Add vulture (dead code detect) and unimport (unused import detect) to Makefile and GitHub Actions
- ✅ #279 - [CHORE]: Implement security audit and vulnerability scanning with grype in Makefile and GitHub Actions
- ✅ #249 - [CHORE]: Achieve 60% doctest coverage and add Makefile and CI/CD targets for doctest and coverage
- ✅ #210 - [CHORE]: Raise pylint from 9.16/10 -> 10/10
📚 Completed Documentation (3)
Release 0.3.0 - Annotations and multi-server tool federations¶
Release 0.3.0 - Completed (100%)
Due: 08 Jul 2025 | Status: Closed Annotations and multi-server tool federations
✨ Completed Features (8)
- ✅ #265 - [Feature Request]: Sample MCP Server - Go (fast-time-server)
- ✅ #179 - [Feature Request]: Configurable Connection Retries for DB and Redis
- ✅ #159 - [Feature Request]: Add auto activation of mcp-server, when it goes up back again
- ✅ #154 - [Feature Request]: Export connection strings to various clients from UI and via API
- ✅ #135 - [Feature Request]: Dynamic UI Picker for Tool, Resource, and Prompt Associations
- ✅ #116 - [Feature Request]: Namespace Composite Key & UUIDs for Tool Identity
- ✅ #100 - Add path parameter or replace value in input payload for a REST API?
- ✅ #26 - [Feature]: Add dark mode toggle to Admin UI
🐛 Completed Bugs (9)
- ✅ #316 - [Bug]: Correctly create filelock_path: str = "tmp/gateway_service_leader.lock" in /tmp not current directory
- ✅ #303 - [Bug]: Update manager.py and admin.js removed
is_activefield - replace with separateenabledandreachablefields from migration - ✅ #302 - [Bug]: Alembic configuration not packaged with pip wheel,
pip install . && mcpgatewayfails on db migration - ✅ #197 - [Bug]: Pytest run exposes warnings from outdated Pydantic patterns, deprecated stdlib functions
- ✅ #189 - [Bug]: Close button for parameter input scheme does not work
- ✅ #152 - [Bug]: not able to add Github Remote Server
- ✅ #132 - [Bug]: SBOM Generation Failure
- ✅ #131 - [Bug]: Documentation Generation fails due to error in Makefile's image target
- ✅ #28 - [Bug]: Reactivating a gateway logs warning due to 'dict' object used as Pydantic model
📚 Completed Documentation (1)
- ✅ #18 - [Docs]: Add Developer Workstation Setup Guide for Mac (Intel/ARM), Linux, and Windows
Release 0.2.0 - Streamable HTTP, Infra-as-Code, Dark Mode¶
Release 0.2.0 - Completed (100%)
Due: 24 Jun 2025 | Status: Closed Streamable HTTP, Infra-as-Code, Dark Mode
✨ Completed Features (3)
🐛 Completed Bugs (2)
📚 Completed Documentation (3)
Release 0.1.0 - Initial release¶
Release 0.1.0 - Completed (100%)
Due: 05 Jun 2025 | Status: Closed Initial release
✨ Completed Features (3)
🐛 Completed Bugs (3)
📚 Completed Documentation (2)
Legend¶
- ✨ Feature Request - New functionality or enhancement
- 🐛 Bug - Issues that need to be fixed
- 🔒 Security - Security features and improvements
- ⚡ Performance - Performance optimizations
- 🔧 Chore - Maintenance, tooling, or infrastructure work
- 📚 Documentation - Documentation improvements or additions
- 🔌 Plugin Features - Plugin framework and plugin implementations
- 📦 Sample Servers - Sample MCP server implementations
- ❓ Question - User questions (typically closed after resolution)
- ✅ Completed - Issue has been resolved and closed
Contributing
Want to contribute to any of these features? Check out the individual GitHub issues for more details and discussion!