-
Notifications
You must be signed in to change notification settings - Fork 11.6k
Pull requests: modelcontextprotocol/servers
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Harden fetch SSRF protection and git repo_path restriction
#4803
opened Sep 13, 2026 by
sachajw
Loading…
3 tasks done
docs: add mcp-witness security testing toolkit to ADDITIONAL.md Resources
#4802
opened Sep 13, 2026 by
desledishant10
Loading…
4 tasks done
Add Aries project description to README
readme: pending
#4801
opened Sep 13, 2026 by
vvemulk
Loading…
12 tasks
fix(git): route git_add(".") through the validated git CLI path
#4799
opened Sep 12, 2026 by
Yash121l
Loading…
6 of 9 tasks
fix(everything): drop a disconnected session from the subscriptions map
#4798
opened Sep 12, 2026 by
voidstackloop
Loading…
9 of 12 tasks
docs(everything): state that sampling/elicitation tools are absent from the catalog without the capability
#4793
opened Sep 11, 2026 by
sasan1200
Loading…
feat(git): add git worktree tools (list, add, remove)
#4791
opened Sep 11, 2026 by
karawitan
Loading…
8 of 9 tasks
fix(filesystem): add stable fail-closed path validation reason codes
#4789
opened Sep 10, 2026 by
tiagovilasboas
Loading…
7 of 12 tasks
docs: warn about archived reference servers (#4785)
#4788
opened Sep 10, 2026 by
FOWEPJF255
Loading…
5 of 12 tasks
fix(docker): work around npm 10.x's arborist crash in the TS builders
#4787
opened Sep 9, 2026 by
AmirF194
Contributor
Loading…
fix(sequentialthinking): correct readOnlyHint/idempotentHint tool annotations
#4784
opened Sep 9, 2026 by
Ashfaqbs
Loading…
8 of 9 tasks
fix(docker): actually run all seven servers as their non-root user
#4783
opened Sep 9, 2026 by
Ashfaqbs
Loading…
8 of 9 tasks
fix(time): flag ambiguous DST fall-back times in convert_time
#4781
opened Sep 8, 2026 by
Nimra3261
Loading…
6 of 12 tasks
Add Calera ICX Epistemic Memory Remote MCP Server to Resources
#4779
opened Sep 8, 2026 by
CaseyYahbara
Loading…
Add Calera FinanceSec Remote MCP Server to Resources
#4778
opened Sep 8, 2026 by
CaseyYahbara
Loading…
fix(fetch): add timeout to robots.txt request in autonomous fetch check
#4776
opened Sep 8, 2026 by
DawnofGenX
Loading…
fix(filesystem): emit object input schemas
#4775
opened Sep 7, 2026 by
Tiancheng-Xu
Loading…
6 of 12 tasks
docs(everything): rename the phantom 'options' JSDoc param to 'constraints'
#4774
opened Sep 7, 2026 by
simpleqt
Loading…
fix(fetch): harden URL fetching against SSRF
#4773
opened Sep 7, 2026 by
Ethanz11-creat
Contributor
Loading…
fix(filesystem): document glob pattern syntax for search_files and directory_tree
#4771
opened Sep 7, 2026 by
Pranav-Nexus
Loading…
feat(fetch): add opt-in host allowlisting (--allowed-hosts)
#4770
opened Sep 6, 2026 by
g-yixuan
Loading…
10 of 12 tasks
docs(everything): fix copy-pasted comments and JSDoc tool names
#4769
opened Sep 6, 2026 by
simpleqt
Loading…
fix(everything): iterate the transports Map with for...of, not for...in
#4768
opened Sep 6, 2026 by
simpleqt
Loading…
fix(everything): label blob resources as application/octet-stream
#4767
opened Sep 6, 2026 by
simpleqt
Loading…
Previous Next
ProTip!
no:milestone will show everything without a milestone.