All issues

Policy engine is stateless and payload-blind: can't express combination, argument-level, or return-path policy

#575

· aggrete-dev opened

on Sep 6, 2026

Windows v0.43.3: gateway aborts on duplicate tool names but run help exposes no tool-name-prefix option

#567

· PracticalSwan opened

on Aug 29, 2026

ALLOWED_PATHS - ALLOW_WRITABLE_PATHS configuration

#565

· geryduyck opened

on Aug 26, 2026

`--servers` returns 0 tools with catalogs from `catalog pull`/`catalog create`; only the legacy flat-file catalog works, but nothing in v0.43.3 can create/refresh that file

#561

· jdpt0 opened

on Aug 24, 2026

ImageInspect failure at gateway startup hard-exits the whole gateway with zero retry (unlike the ImagePull path fixed in #163)

#560

· alterbusinessmethod-afk opened

on Aug 24, 2026

Proposal: official HOL Guard policy backend/config example for MCP tool invocation

#558

· kantorcodes opened

on Aug 23, 2026

Audit attestation interceptor for tamper-evident tool call records

#557

· elang2 opened

on Aug 22, 2026

`catalog server add`/`profile server add --server docker://<ref>` fails with "is not a self-describing image" for any image, including official ones

#556

· iqnupe opened

on Aug 21, 2026

mcp-add ignores the --secrets .env file for remote servers when the secrets engine is unreachable

#554

· viktorvelchev opened

on Aug 17, 2026

stdio backend tools disappear after list_changed transport disconnect

#552

· jessesanford opened

on Aug 13, 2026

`docker mcp secret set` fails with -25299 ("item already exists in the keychain") on every update after the first insert

#551

· fefc81 opened

on Aug 13, 2026

Unable to connect to the docker-secrets-engine socket

#550

· medvedev8482 opened

on Aug 12, 2026