Issues

• fix(api): audit an operation refused by input validation

  mctlhq/mctl-api#760 · Filter by author mashkovd opened on Oct 21, 2026

• DevLoop: a run that Failed before investigate cannot be restarted

  mctlhq/mctl-api#753 · Filter by author mashkovd opened on Oct 21, 2026
  1

• feat(usage): outcome counts and latency percentiles in usage summary buckets

  mctlhq/mctl-api#749 · Filter by author mashkovd opened on Oct 21, 2026

• feat(mcp): let a run call mctl-api MCP tools under its delegated subject

  mctlhq/mctl-api#747 · Filter by author mashkovd opened on Oct 21, 2026

• governance: prepare agent receipt gate for observe rollout

  mctlhq/mctl-api#744 · Filter by author mashkovd opened on Oct 21, 2026

• governance: require a consumed approval receipt for governed agent operations

  mctlhq/mctl-api#723 · Filter by author mashkovd opened on Oct 19, 2026
  1

• governance: harden action-approval contract after #700

  mctlhq/mctl-api#721 · Filter by author mashkovd opened on Oct 19, 2026
  6

• governance: persist durable decision and execution-attempt records

  mctlhq/mctl-api#701 · Filter by author mashkovd opened on Oct 18, 2026
  1

• mctl_list_previews reports count 0 when the ArgoCD query fails

  bug
  mctlhq/mctl-api#698 · Filter by author mashkovd opened on Oct 18, 2026

• test(identity): live-check a ZITADEL-only human answering human input as principal:prn_

  mctlhq/mctl-api#682 · Filter by author mashkovd opened on Oct 18, 2026

• fix(mcp): usage summary follow-ups from #677 review (P3)

  enhancement
  mctlhq/mctl-api#680 · Filter by author mashkovd opened on Oct 18, 2026

• tenant-role gate: P3 follow-ups from #665

  mctlhq/mctl-api#673 · Filter by author mashkovd opened on Oct 17, 2026

• Customer allowlist refusal shows ZITADEL's misleading verified-email error

  mctlhq/mctl-api#653 · Filter by author mashkovd opened on Oct 17, 2026
  2

• feat(usage): tier-aware pricing for prompt-length-priced models (Haiku 5.5)

  mctlhq/mctl-api#642 · Filter by author mashkovd opened on Oct 17, 2026

• feat(dev-loop): allow restarting a DevLoop that was abandoned, keep rejecting every other closed run

  mctlhq/mctl-api#640 · Filter by author mashkovd opened on Oct 16, 2026

• feat(x402): implement an isolated testnet MCP Check pilot

  mctlhq/mctl-api#616 · Filter by author mashkovd opened on Oct 13, 2026

• fix(mcp): required arguments read with a silent default give a misleading error

  mctlhq/mctl-api#611 · Filter by author mashkovd opened on Oct 13, 2026
  2

• mctl_list_repos always fails: Backstage /repos accepts only user credentials

  mctlhq/mctl-api#584 · Filter by author mashkovd opened on Oct 12, 2026

• Follow-ups from GHSA-cq8r-pq2c-mw3r fix (#575)

  mctlhq/mctl-api#581 · Filter by author mashkovd opened on Oct 12, 2026

• hardening: P3 follow-ups from parameter constraints (#561)

  mctlhq/mctl-api#568 · Filter by author mashkovd opened on Oct 11, 2026

• Evaluate x402 and MPP adapter compatibility

  mctlhq/mctl-api#549 · Filter by author mashkovd opened on Oct 11, 2026

• CI deploy: record dockerfile_path in denial audit entries

  mctlhq/mctl-api#532 · Filter by author mashkovd opened on Oct 10, 2026

• feat(auth): retire raw GitHub tokens as human credentials

  mctlhq/mctl-api#525 · Filter by author mashkovd opened on Oct 10, 2026
  1

• db: bound pgxpool size per store, or share one pool on OAUTH_DB_URL

  mctlhq/mctl-api#508 · Filter by author mashkovd opened on Oct 9, 2026
  1

• oauth: count every GitHub callback outcome in oauth_upstream_signins_total

  mctlhq/mctl-api#505 · Filter by author mashkovd opened on Oct 9, 2026