# Reported issues for aethis-mcp

Pod holds 14 of 14 GitHub reports that passed its relevance review. This can include external user reports, maintainer-confirmed bugs, and concrete feature gaps. Treat them as evidence to inspect, not a count of distinct defects.

Back to [aethis-mcp](/mcp/aethis-mcp).

## Most discussed

### Expose recovery-aware generation status and cancellation tools

## Summary

Expose the engine's typed generation status and explicit cancellation route through the public MCP server.

*Execution profile: build.* Correctness-bearing capability or consent-boundary
ambiguity escalates to `assure`.

## Observability

- Signal: exact upstream status/cancel response and typed tool result; no new
  retained telemetry store.
- Surface/channel: MCP tool response/error and capability drift tests.
- Propagation: generated tool inventory and public capability consumers…

[Read the thread](https://github.com/Aethis-ai/aethis-mcp/issues/77) · 2026-09-03 · closed · outside contributor · 3 comments

### Public developer release 6/12 — secure and publish the official MCP Registry release

Part of [Aethis-ai/aethis-workspace#643](https://github.com/Aethis-ai/aethis-workspace/issues/643).

Canonical contract: [docs/specs/2026-07-25-public-developer-release.md](https://github.com/Aethis-ai/aethis-workspace/blob/main/docs/specs/2026-07-25-public-developer-release.md).

> **ADVISOR REVIEW — DO NOT START** until the parent epic records `GO TO EXECUTE`.

*Execution profile: build.*

# Goal

Close the untrusted-data boundary, build one immutable release artefact, gate it
before…

[Read the thread](https://github.com/Aethis-ai/aethis-mcp/issues/66) · 2026-07-25 · closed · outside contributor · 2 comments

### Pilot first 20: make next-question tools pending-input aware

Part of workspace#803 / [Goal 1 #835](https://github.com/Aethis-ai/aethis-workspace/issues/835). Contract: `docs/specs/2026-08-01-lisa-first-20-minutes.md` ([workspace spec PR #834](https://github.com/Aethis-ai/aethis-workspace/pull/834)). Blocked until the matching aethis-core version is live on `api.aethis.ai`.

## Deliverable

Update `aethis_next_question` and decision tool descriptions so typed `pending_non_applicant_input` is not rendered as “no remaining question” or completion. Return…

[Read the thread](https://github.com/Aethis-ai/aethis-mcp/issues/72) · 2026-08-01 · open · outside contributor · 1 comment

### Provenance 5/14 — add structured source-target authoring to MCP

Part of [epic #695](https://github.com/Aethis-ai/aethis-workspace/issues/695). Canonical contract: [spec](https://github.com/Aethis-ai/aethis-workspace/blob/main/docs/specs/2026-07-26-provenance-on-supplied-sources.md).

> **DO NOT START** until `GO TO EXECUTE`; package publication remains separately gated.

*Execution profile: build.*
*Review independence: different-session.*

**Owned paths:** `src/` publish tool/client/schema, tests/drift fixtures,
`server.json`/inventory, README, version,…

[Read the thread](https://github.com/Aethis-ai/aethis-mcp/issues/71) · 2026-07-26 · closed · outside contributor · 1 comment

### aethis-mcp P2 — usage tool

Part of the Metering & Rate-Limit Revamp epic (Aethis-ai/aethis-workspace#552).
Full contract: `docs/specs/2026-07-20-metering-and-rate-limit-revamp.md` in
Aethis-ai/aethis-workspace. Depends on P2 (`/usage` + headers) live on staging.

*Execution profile: build.*

**Observability:** signal — the P2 `/usage` endpoint this consumes; surface — the
MCP tool output in the host editor; channel — N/A.

## Goal

Expose usage/remaining budget through the MCP server so an agent authoring inside
Claude…

[Read the thread](https://github.com/Aethis-ai/aethis-mcp/issues/64) · 2026-07-20 · open · outside contributor · 1 comment

### Authoring Coach 6/8 — review_project MCP tool + render hint + client-id

Part of the Authoring Coach epic (Aethis-ai/aethis-workspace#514). Spec (read in full): [`docs/specs/2026-07-19-authoring-coach.md`](https://github.com/Aethis-ai/aethis-workspace/blob/main/docs/specs/2026-07-19-authoring-coach.md).

*Execution profile: build.* *Review independence: different-session.*

**Depends on:** P1 live on staging; renders P4's `review_hint`. **Public release waits until P1 is live on `api.aethis.ai`** (else a released client calls a prod 404).

## Goal
Expose the coach…

[Read the thread](https://github.com/Aethis-ai/aethis-mcp/issues/57) · 2026-07-19 · closed · outside contributor · 1 comment

### aethis-mcp 3/6 — tool-schema drift check + staging integration lane

Part of the developer-platform test programme epic (Aethis-ai/aethis-workspace#477). Spec: [`docs/specs/2026-07-15-developer-platform-test-programme.md`](https://github.com/Aethis-ai/aethis-workspace/blob/main/docs/specs/2026-07-15-developer-platform-test-programme.md) — P3. Depends on P1 (contract endpoint).

*Execution profile: build.*

**Observability:** signal = `qa_runs` record per run; surface = console `/quality`; channel = weekly dev-report digest.

## Goal

The MCP's 27 tool schemas…

[Read the thread](https://github.com/Aethis-ai/aethis-mcp/issues/54) · 2026-07-15 · closed · outside contributor · 1 comment

### Support custom request headers (IAM-gated / reverse-proxied deployments)

The MCP client sends only `X-API-Key`. Deployments behind an identity-aware proxy (e.g. Cloud Run IAM, oauth2-proxy) need an additional `Authorization: Bearer <token>` (or arbitrary) header on every request, and today the only workaround is running a local forwarding proxy that injects it.

Proposal: an `AETHIS_EXTRA_HEADERS` env var (JSON object or `Name: value` newline list) merged into every request's headers, with the documented caveat that header values may be short-lived tokens (the…

[Read the thread](https://github.com/Aethis-ai/aethis-mcp/issues/47) · 2026-06-07 · closed · outside contributor · 1 comment

## Most recent

### aethis-mcp 5/9 — un-red the staging lane (hookTimeout) + probe + issue-upsert + post-publish engine call

Part of the public-surface CI epic (Aethis-ai/aethis-workspace#1129). **Read the spec first:** [docs/specs/2026-08-23-public-surface-ci.md](https://github.com/Aethis-ai/aethis-workspace/blob/main/docs/specs/2026-08-23-public-surface-ci.md) — §P5 + Ground truth "Staging lanes".

*Execution profile: build.*

## Goal
The aethis-mcp nightly staging lane (red 4/4 nights) goes green for the real reason it is red, learns to tell "engine unreachable" from "test failed", reports red to an issue, and…

[Read the thread](https://github.com/Aethis-ai/aethis-mcp/issues/75) · 2026-08-23 · open · outside contributor · 0 comments

### Audit JSON-passthrough tools for free-text-field prompt-injection risk

## Problem

Tools that return `fmt(result)` (raw JSON passthrough) include free-text fields supplied by the API — `name`, `description`, `domain`, `error_message`, etc. — that reach the model verbatim inside the JSON blob. Today's `fenceUntrusted` policy ([CLAUDE.md gotchas](../CLAUDE.md), GHSA-ph7q-r9q4-922g) is applied to tools that **interpolate** free-text fields into prose via `lines.push(...)`, but JSON serialization is itself a form of interpolation reaching the model — a malicious…

[Read the thread](https://github.com/Aethis-ai/aethis-mcp/issues/45) · 2026-05-27 · closed · outside contributor · 1 comment

### Expose rulebooks via MCP: discover, list, schema (with ruleset counts)

## Problem

The aethis MCP server treats rulebooks as second-class. Today it exposes ruleset-level operations (`aethis_discover_rulesets`, `aethis_list_rulesets`, `aethis_schema`) but no equivalent for rulebooks. The only rulebook surface is `aethis_decide` accepting a `rulebook_id` — you can *evaluate* a rulebook but you can't *find* one, and you certainly can't see how its rulesets compose.

Concrete failure mode (2026-05-27 session): asked whether `aethis/uk-fsm` was "three rulebooks or one…

[Read the thread](https://github.com/Aethis-ai/aethis-mcp/issues/43) · 2026-05-27 · closed · outside contributor · 0 comments

### feat: add aethis_set_field_spec MCP tool

## Problem

The \`POST /projects/{project_id}/fields/spec\` endpoint exists in aethis-core but no MCP tool exposes it. Without it, the Phase 2 field validation loop is unreachable from Claude.

## Solution

Add \`aethis_set_field_spec\` tool:
- Handler: validate args, call \`client.setFieldSpec()\`, return confirmation listing stored fields
- \`server.tool()\` registration with Zod schema

\`client.ts\` already has \`setFieldSpec()\` — only \`index.ts\` changes needed.

## Success Criteria…

[Read the thread](https://github.com/Aethis-ai/aethis-mcp/issues/9) · 2026-04-15 · closed · outside contributor · 0 comments

### feat: domain guidance tools (aethis_add_domain_guidance, aethis_list_domain_guidance)

## Problem

MCP users have no way to manage domain-level guidance hints — cross-section principles that apply to every project in a domain. Project-level guidance is tied to a specific project; domain guidance needs its own tools.

With the new `/domains/{domain}/guidance` API (Aethis-ai/aethis-core#30), MCP needs matching tools.

## Change

**`client.ts` additions:**
```typescript
async addDomainGuidance(domain: string, guidanceText: string,
                        processType?: string,…

[Read the thread](https://github.com/Aethis-ai/aethis-mcp/issues/8) · 2026-04-14 · closed · outside contributor · 1 comment

### feat: expose process_type parameter in aethis_add_guidance tool

## Problem

The `aethis_add_guidance` tool does not expose `process_type`. All guidance hints are stored as `rule_generation` regardless of intent.

The underlying API and `client.ts` already support `process_type` (optional `processType` parameter in `client.addGuidance()`). This is a surface gap only.

## Change

```typescript
server.tool("aethis_add_guidance", "...", {
  project_id: z.string(),
  guidance_text: z.string(),
  process_type: z.enum(["rule_generation", "field_extraction"])…

[Read the thread](https://github.com/Aethis-ai/aethis-mcp/issues/7) · 2026-04-14 · closed · outside contributor · 1 comment

The remaining reports are on [the project's issue tracker](https://github.com/Aethis-ai/aethis-mcp/issues).