Pod

Yes, this is on purpose. Pod is built for agents, so the default page is plain HTML.
Human? View the normal website.
Agent? You probably prefer /mcp/agentguard47/issues.md or /mcp/agentguard47/issues.json, or Pod over MCP.

Reported issues for agentguard47

Pod holds 16 of 21 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user.

Back to agentguard47.

Most discussed

security: mcp-server npm audit — fast-uri (high), hono + qs (moderate)

Vulnerability

Severity: high (1) + moderate (2) Source: Nightshift supervisor security scan 2026-06-09 Package/file: mcp-server/package-lock.json (present on main)

Package Severity Advisory
fast-uri high <=3.1.1
hono moderate <=4.12.20
qs moderate 6.11.1–6.15.1 — GHSA-q8mj-m7cp-5q26 (qs.stringify DoS on null/undefined comma-format array entries w/ encodeValuesOnly)

All three are confirmed on the committed main lockfile (not ju

Read the thread · 2026-06-09 · closed · 16 comments

Switch PyPI publish workflow to Trusted Publishing

Summary

The v1.2.3 publish succeeded, but the publish workflow emitted this warning:

The workflow was run with the attestations: true input, but an explicit password was also set, disabling Trusted Publishing. As a result, the attestations input is ignored.

Why this matters

We are already generating build provenance, but PyPI attestations are not actually being used while the workflow authenticates with PYPI_TOKEN. Moving to Trusted Publishing would reduce secret management risk

Read the thread · 2026-03-28 · closed · 10 comments

security: hono high-severity advisories in mcp-server (non-breaking fix)

Vulnerability

Severity: high Source: Nightshift supervisor security scan 2026-07-12 Package/file: mcp-server/ -> hono (installed <=4.12.24)

Details

npm audit in mcp-server/ reports 1 high-severity chain, all via hono. Notable advisories in the bundle:

Read the thread · 2026-07-12 · closed · 3 comments

security: hono high-severity advisories in mcp-server (bump hono)

Vulnerability

Severity: high Source: Nightshift supervisor security scan 2026-07-06 Package: hono (range <=4.12.24) via mcp-server/

Details

npm audit in mcp-server/ reports 1 high with 9 chained advisories in hono, including:

Read the thread · 2026-07-06 · closed · 2 comments

lead_captures: RLS disabled + new external 'tool_capture' source from marketing site

Heads-up from the bmdpat marketing site about the shared public.lead_captures table (Supabase project xlvbwvplsekotnkjehke). Two things for the AgentGuard side to be aware of / decide on.

1. New external source='tool_capture' rows (additive)

The marketing tools (/tools/quant-compare, /tools/vram-calculator) now log email captures into lead_captures. To do this the source CHECK constraint was extended additively:

-- before: shared_trace, protection_report, sign_u

[Read the thread](https://github.com/bmdhodl/agent47/issues/566) · 2026-06-02 · closed · 2 comments

### security: npm audit — 1 high (hono) in mcp-server, non-breaking fix

## Vulnerability

**Severity:** high (npm audit) — but **no real exposure in our context** (see below)
**Source:** Nightshift supervisor security scan 2026-07-07
**Package/file:** `mcp-server/` → transitive `hono`

## Details
`cd mcp-server && npm audit` reports 1 high: hono Lambda@Edge adapter advisory (GHSA-wgpf-jwqj-8h8p) — keeps only the last value of a repeated request header. Fix is available and **non-breaking** via `npm audit fix`.

The advisory is **Lambda@Edge-adapter specific**. Our m

[Read the thread](https://github.com/bmdhodl/agent47/issues/633) · 2026-07-07 · closed · 1 comment

### Publish MCP server 0.2.2 to npm

`mcp-server/package.json`, `mcp-server/package-lock.json`, `mcp-server/src/index.ts`, and `mcp-server/server.json` all target `@agentguard47/mcp-server@0.2.2`, but npm latest is still `0.2.1`.

Verified on 2026-05-03:

```text
npm view @agentguard47/mcp-server version
0.2.1

npm view @agentguard47/mcp-server@0.2.2 version
E404: @agentguard47/mcp-server@0.2.2 is not in this registry.

npm --prefix mcp-server test, registry metadata tests, release guard, npm pack --dry-run, and `npm publis

Read the thread · 2026-05-03 · closed · 1 comment

security: gitleaks - 2 finding(s) - secret in git history: Detected a Generic API Key, potentially exposing access t

Automated security scan: gitleaks

Created by SecurityAnalyst on 2026-04-22. Report: Reports/Security/analyst-2026-04-22.md

Findings (2 total)

Read the thread · 2026-04-22 · closed · 1 comment

Most recent

security: gitleaks - 2 finding(s) - secret in git history: Detected a Generic API Key, potentially exposing access t

Automated security scan: gitleaks

Created by SecurityAnalyst on 2026-04-20. Report: Reports/Security/analyst-2026-04-20.md

Findings (2 total)

Read the thread · 2026-04-21 · closed · 1 comment

T20: SDK examples expansion (3 real-world examples)

Create 3 new examples: fastapi_budget_middleware.py (web app integration), multi_agent_budget_sharing.py (shared team budget), dashboard_integration.py (full SDK-to-dashboard flow). Add to examples/ directory.

Read the thread · 2026-02-15 · closed · 0 comments

Republish MCP server v0.2.0 to npm

Context

QA audit found that the published npm package @agentguard47/mcp-server@0.1.0 still has the old broken default URL (agentguard.dev). The source was fixed in commit 0661873 but never republished.

Done (in b842981)

Remaining

Read the thread · 2026-02-15 · closed · 1 comment

Fix MCP server default URL and ship working dist/

Problem

The MCP server is non-functional out of the box:

  1. src/client.ts line 1 sets DEFAULT_URL = "https://agentguard.dev" which does not resolve. Should be https://app.agentguard47.com.
  2. dist/ is not committed and not built during npm publish, so @agentguard47/mcp-server from npm is an empty package.
  3. zod is imported in index.ts but not listed as an explicit dependency (transitive from @modelcontextprotocol/sdk).

Fix

Read the thread · 2026-02-10 · closed · 0 comments

T16: Cost guardrail documentation guide

Context

Need the canonical guide for cost guardrails — the page linked from README, landing page, and onboarding.

Acceptance Criteria

Read the thread · 2026-02-09 · closed · 0 comments

Span and event name length limits

No length validation on span/event/service names. Truncate to 1000 chars in TraceContext.span() and .event(). Log warning on truncation.

Read the thread · 2026-02-09 · closed · 1 comment

Add public property accessors to guards for integration use

Problem

LangChain integration (integrations/langchain.py lines 146-148) accesses private attributes like self._budget_guard._max_tokens. Fragile coupling that breaks if internals change.

Fix

Add public read-only properties to BudgetGuard:

@property
def max_tokens(self) -> Optional[int]:
    return self._max_tokens

Same for max_calls, max_cost_usd, current totals.

Then update LangChain integration to use public API.

Files

Read the thread · 2026-02-09 · closed · 0 comments

GA launch checklist and materials

Summary

Pre-launch checklist to verify everything is ready for public promotion.

Tasks

Read the thread · 2026-02-09 · closed · 1 comment

The remaining reports are on the project's issue tracker.