Repository Issue Activity (beta)

#2093 CLI ignores a server's persisted `metadata` from mcp.json

#2000 Three small cleanups flagged in the v2.2.0 merge review

#1026 MCP Apps Testing Spec

#1910 Make complex _meta possible

#2085 Fail lint on warnings (--max-warnings 0): a warn-level rule let a stale-closure bug reach review

#1005 Feature: Strict JSON Schema validation with actionable error messages in CLI mode

#2069 ci: drop the redundant PR-head checkout from claude.yml (code scanning alert 71)

#2089 Bug: the pagination toggle's rollback baseline goes stale after a failed server-list read

#1914 Bug: a failed server-list refresh after adding a server closes the modal with no error

#2082 FileSecretStore has no cross-process mutual exclusion: decide whether to adopt an OS-backed lock

#1916 Proposal: optional machine-readable readiness summary for inspected MCP servers

#1917 [Blocked upstream] Tasks requests over Streamable HTTP omit the required Mcp-Name header (SEP-2663)

#1745 [Blocked upstream] Remove ext-apps SDK-v1 shims when the package ships a v2 peer (ext-apps#702)

#1492 Investigate migrating from unmaintained tsup to tsdown

#2064 Sandbox CSP "dropping unsafe CSP source" warning misstates the reason — the entry is not an origin, not unsafe

#2084 Editing a server's config deletes its stored OAuth client secret

#1950 Secret persistence without an OS keychain: a file-backed (or explicitly in-memory) SecretStore for containers and unsupported platforms

#1854 Implement negotiated app-rendered form elicitations

#2086 Run the MCP Apps sandbox smokes in Firefox and WebKit, not just Chromium

#2080 v1: release 1.0.2 with the pending security and audit fixes

#2079 v1: npm 11.19 warns about unreviewed install scripts (esbuild, fsevents) on every install

#2074 v1: clear remaining npm audit advisories (ip-address reachable; hono, @hono/node-server, fast-uri, brace-expansion present but unreachable)

#2072 v1: js-yaml overrides pin vulnerable versions, making `npm audit fix` a no-op (dev-only exposure)

#1015 Tracking: JSON Schema Support in Inspector

#929 Add Support for SEP-1036: URL Elicitation to Inspector