Repository Issue Activity (beta)

#356 No way to control the requested OAuth scope set

#354 OAuth: fresh Fastmail DCR registration rejected as obsolete after loopback redirect normalization

#323 Env placeholder syntax for --header/--env is undiscoverable from CLI or npm package; ${env:VAR} silently passes through verbatim

#334 vault set treats relative expires_in as immediately due and can invalidate fresh grants

#321 OAuth discovery fetches inherit the transport's accept: text/event-stream, misrouting them through nodeHttp1Fetch → 403 from ALBs

#320 nodeHttp1Fetch sends no User-Agent → 403 from ALBs/WAFs that reject headerless HTTP/1.1 requests

#307 OAuth: SDK post-401 auth() redeems outside the cross-process refresh lock

#310 SSE fallback fires on any primary error, replacing the real cause with a misleading HTTP 405 on streamable-HTTP-only servers

#305 OAuth refresh is not serialized across processes, allowing rotating-token replay and grant revocation

#290 OAuth DCR re-registers client on every run when redirect URI changes, preventing silent token refresh (WorkOS)

#244 OAuth DCR client information is missing after Atlassian authorization, preventing refresh

#283 `serve`/daemon path launches the system browser on 401 with no way to suppress it (`MCPORTER_OAUTH_NO_BROWSER` is auth-command-only)

#286 vault set rejects clientInfo from OAuth dynamic client registration

#236 v0.12.4 hasn't been released

#247 Serialize interactive OAuth authorization per shared provider/session

#231 Stale client registration replayed to DCR forever; only --reset recovers

#226 refreshable_bearer: refresh failure path lacks invalid_grant/concurrent-refresh recovery — stale rotated refresh token replayed until provider revokes the grant (Notion MCP)

#221 Bug: list signature renders any array parameter as string[] regardless of items.type

#218 Bug: persisted HTTP servers are treated as ad-hoc in `list <name>` and `call server.tool`

#214 [Bug]:CLI truncates large output at 64KB when stdout is a pipe (forced process.exit() before stdout drains)

#212 Support key=@path to read an argument value from a file

#207 [Bug]: corrupt OAuth credential cache file crashes connection instead of degrading to re-auth (DirectoryPersistence)

#189 Option / Feature to toggle MCP responses to be stored as files

#201 `callOnce()` should forward the OAuth-suppression option (`disableOAuth` from #198)

#199 Expose Runtime.connect's options shape as a public type