Repository Issue Activity (beta)

#613 Idea: opt-in monetization layer for MCP tool responses

#610 read_file does not decode UTF-16 LE files created by Windows PowerShell 5.1

#608 Offer: catch strict-client schema breaks before users do

#79 Gemini not working with DesktopCommanderMCP anymore

#586 Intermittent wrong-device routing in multi-device setup despite explicit deviceId

#599 [v0.2.46 remote] Process and search sessions do not reliably preserve device affinity in multi-device setups

#600 Remote authorization fails for both ChatGPT OAuth and device-code flow

#601 OAuth Session Creation Failure – "Failed to create OAuth session" on Remote MCP + ChatGPT

#602 Server opens a browser window (analytics-tagged welcome page) during MCP initialize

#594 🔒 Security: Environment variable inheritance + MCP_SERVER_URL SSRF leading to OAuth token theft

#591 MCP server becomes unresponsive mid-session; all tool calls hang (no result after 4+ min); persists across Claude Desktop restart

#590 macOS: allowedDirectories rejects /tmp paths after realpath resolves them to /private/tmp

#589 update readme

#584 Read File Output Extremely Long

#587 [Security] SSRF via `read_file` tool — no URL validation in `readFileFromUrl()`

#548 [Security] interact_with_process bypasses blockedCommands - new variant of known limitation

#579 [SECURITY] High: SSRF via read_file Tool — Unvalidated URL Fetch Allows Cloud Metadata Access

#568 Potential sensitive data exposure: returning raw file paths and content snippets

#554 edit_block silently truncates file to pre-edit byte length when replacement grows the file

#581 [Retracted]

#580 [SECURITY] High: Command Blocklist Bypass via Process Substitution and node:local

#567 Unbounded recursion / deep nesting can cause stack overflow / DoS

#560 [Security] SSRF via read_file isUrl parameter - No SSRF protection on URL fetch

#552 interact_with_process bypasses blockedCommands — missing validateCommand() call in interactWithProcess()

#556 [Security] Command Blocklist Bypass via Newline Injection in start_process — Unfixed Since April 2026 (Issue #422)