Issues

• Clean up secret-store entries orphaned when a state file's namespace stamp is stripped

  enhancementv2
  modelcontextprotocol/inspector#2560 · Filter by author BobDickinson opened on Oct 2, 2026 · v2.10.0

• Promote recurring pr-flow/board-ops command blocks into scripts/ helpers

  chorev2
  modelcontextprotocol/inspector#2558 · Filter by author BobDickinson opened on Oct 1, 2026 · v2.10.0
  

• chore(deps): monthly dependency refresh

  choredependabotv2
  modelcontextprotocol/inspector#2557 · Filter by author github-actions opened on Oct 1, 2026 · v2.10.0

• Script the release notes (generated list, ledger, known issues, reporter thanks) and release creation in the release skill

  chorev2
  modelcontextprotocol/inspector#2550 · Filter by author cliffhall opened on Sep 30, 2026 · v2.10.0
  3

• Secret-store entries aren't scoped by OAuth state file: profiles sharing a server overwrite each other's tokens

  bugv2
  modelcontextprotocol/inspector#2549 · Filter by author cliffhall opened on Sep 30, 2026 · v2.10.0
  1

  

• Board the SDK watch and monthly dependency-refresh issues with the GitHub App token

  blockedchorev2
  modelcontextprotocol/inspector#2548 · Filter by author cliffhall opened on Sep 30, 2026 · v2.10.0
  1

• Move the Dependabot alert sweep from the nonexistent PROJECT_TOKEN to the GitHub App token

  blockedchorev2
  modelcontextprotocol/inspector#2547 · Filter by author cliffhall opened on Sep 30, 2026 · v2.10.0
  1

• Fix code-scanning alerts #74-#76: Markdown cell escaping misses backslashes in the sweep scripts

  chorev2
  modelcontextprotocol/inspector#2546 · Filter by author cliffhall opened on Sep 30, 2026 · v2.10.0
  1

• Scan v2/main with CodeQL: switch from default setup to a committed advanced-setup workflow

  chorev2
  modelcontextprotocol/inspector#2545 · Filter by author cliffhall opened on Sep 30, 2026 · v2.10.0
  1

• Create the GitHub App for board writes and security-alert reads, and store its credentials as org secrets

  chorev2
  modelcontextprotocol/inspector#2544 · Filter by author cliffhall opened on Sep 30, 2026 · v2.10.0
  1

• Tracker: security and board automation on a GitHub App credential

  chorev2
  modelcontextprotocol/inspector#2543 · Filter by author cliffhall opened on Sep 30, 2026 · v2.10.0
  1

• Nightly security sweep: turn Dependabot and code-scanning (CodeQL) alerts into board-tracked issues

  blockedchorev2
  modelcontextprotocol/inspector#2542 · Filter by author cliffhall opened on Sep 30, 2026 · v2.10.0
  1

• TUI Protocol tab renders request/response JSON with no size cap

  bugv2
  modelcontextprotocol/inspector#2539 · Filter by author cliffhall opened on Sep 30, 2026 · v2.10.0
  1

• Unjustified 'as unknown as OAuthTokens' in storage-browser.test.ts

  chorev2
  modelcontextprotocol/inspector#2538 · Filter by author cliffhall opened on Sep 30, 2026 · v2.10.0
  1

• CLI --server with an Object.prototype name (e.g. 'constructor') fails with an unrelated error instead of 'not found'

  bugv2
  modelcontextprotocol/inspector#2537 · Filter by author cliffhall opened on Sep 30, 2026 · v2.10.0
  2

• TUI and web launcher crash with an unhandled 'error' event when the browser opener cannot be spawned

  bugv2
  modelcontextprotocol/inspector#2533 · Filter by author cliffhall opened on Sep 30, 2026 · v2.10.0
  1

• Tools screen: Results panel shows a double vertical scrollbar on long results

  bugv2
  modelcontextprotocol/inspector#2525 · Filter by author cliffhall opened on Sep 29, 2026 · v2.10.0
  1

• Show the OAuth redirect URI (with copy) in Server Settings for pre-registered clients

  enhancementv2
  modelcontextprotocol/inspector#2524 · Filter by author cliffhall opened on Sep 29, 2026 · v2.10.0
  1

• test-servers skill points to scripts/ensure-test-servers.mjs, which does not exist (it lives at scripts/lib/ensure-test-servers.mjs)

  modelcontextprotocol/inspector#2523 · Filter by author roli-lpci opened on Sep 29, 2026

• Build errors on MacOS 26.6 (Tahoe)

  bug
  modelcontextprotocol/inspector#2518 · Filter by author jhelm opened on Sep 28, 2026

• CLI stored-auth flags (--use-stored-auth, --list-stored-auth, --wait-for-auth) miss tokens stored under byIssuer

  bugv2
  modelcontextprotocol/inspector#2517 · Filter by author cliffhall opened on Sep 27, 2026 · v2.10.0
  1

• Skill/get (resources/read) caches response (for example with TTL=10)

  bug
  modelcontextprotocol/inspector#2516 · Filter by author symdeb opened on Sep 26, 2026

• Plain HTTP 403 without WWW-Authenticate starts OAuth discovery in the Inspector web client

  bug
  modelcontextprotocol/inspector#2515 · Filter by author revetkn opened on Sep 26, 2026
  2

• Redact URL query secrets in error text displayed by the web and TUI clients

  enhancementv2
  modelcontextprotocol/inspector#2490 · Filter by author cliffhall opened on Sep 24, 2026 · v2.10.0
  1

• Nightly triage: sweep unboarded issues onto the board and run the board audit

  blockedchorev2
  modelcontextprotocol/inspector#2463 · Filter by author cliffhall opened on Sep 23, 2026 · v2.10.0
  3