# Reported issues for agentguard47

Pod holds 16 of 21 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user.

Back to [agentguard47](/mcp/agentguard47).

## Most discussed

### security: mcp-server npm audit — fast-uri (high), hono + qs (moderate)

## Vulnerability

**Severity:** high (1) + moderate (2)
**Source:** Nightshift supervisor security scan 2026-06-09
**Package/file:** `mcp-server/package-lock.json` (present on `main`)

| Package | Severity | Advisory |
|---|---|---|
| fast-uri | high | <=3.1.1 |
| hono | moderate | <=4.12.20 |
| qs | moderate | 6.11.1–6.15.1 — GHSA-q8mj-m7cp-5q26 (qs.stringify DoS on null/undefined comma-format array entries w/ encodeValuesOnly) |

All three are confirmed on the committed `main` lockfile (not ju

[Read the thread](https://github.com/bmdhodl/agent47/issues/596) · 2026-06-09 · closed · 16 comments

### Switch PyPI publish workflow to Trusted Publishing

## Summary
The `v1.2.3` publish succeeded, but the publish workflow emitted this warning:

> The workflow was run with the `attestations: true` input, but an explicit password was also set, disabling Trusted Publishing. As a result, the attestations input is ignored.

## Why this matters
We are already generating build provenance, but PyPI attestations are not actually being used while the workflow authenticates with `PYPI_TOKEN`. Moving to Trusted Publishing would reduce secret management risk 

[Read the thread](https://github.com/bmdhodl/agent47/issues/282) · 2026-03-28 · closed · 10 comments

### security: hono high-severity advisories in mcp-server (non-breaking fix)

## Vulnerability

**Severity:** high
**Source:** Nightshift supervisor security scan 2026-07-12
**Package/file:** `mcp-server/` -> `hono` (installed `<=4.12.24`)

## Details
`npm audit` in `mcp-server/` reports 1 high-severity chain, all via `hono`. Notable advisories in the bundle:
- Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)
- CORS middleware reflects any Origin with credentials when `origin` defaults to wildcard
- IP Restriction bypasses static deny rules for no

[Read the thread](https://github.com/bmdhodl/agent47/issues/649) · 2026-07-12 · closed · 3 comments

### security: hono high-severity advisories in mcp-server (bump hono)

## Vulnerability

**Severity:** high
**Source:** Nightshift supervisor security scan 2026-07-06
**Package:** `hono` (range <=4.12.24) via `mcp-server/`

## Details
`npm audit` in `mcp-server/` reports 1 high with 9 chained advisories in `hono`, including:
- GHSA-wwfh-h76j-fc44 — path traversal in serve-static on Windows via encoded backslash (%5C)
- GHSA-88fw-hqm2-52qc — CORS middleware reflects any Origin with credentials on wildcard default
- GHSA-f577-qrjj-4474 — JWT middleware accepts any Au

[Read the thread](https://github.com/bmdhodl/agent47/issues/631) · 2026-07-06 · closed · 2 comments

### lead_captures: RLS disabled + new external 'tool_capture' source from marketing site

Heads-up from the bmdpat marketing site about the **shared `public.lead_captures` table** (Supabase project `xlvbwvplsekotnkjehke`). Two things for the AgentGuard side to be aware of / decide on.

## 1. New external `source='tool_capture'` rows (additive)
The marketing tools (`/tools/quant-compare`, `/tools/vram-calculator`) now log email captures into `lead_captures`. To do this the `source` CHECK constraint was extended **additively**:

```sql
-- before: shared_trace, protection_report, sign_u

[Read the thread](https://github.com/bmdhodl/agent47/issues/566) · 2026-06-02 · closed · 2 comments

### security: npm audit — 1 high (hono) in mcp-server, non-breaking fix

## Vulnerability

**Severity:** high (npm audit) — but **no real exposure in our context** (see below)
**Source:** Nightshift supervisor security scan 2026-07-07
**Package/file:** `mcp-server/` → transitive `hono`

## Details
`cd mcp-server && npm audit` reports 1 high: hono Lambda@Edge adapter advisory (GHSA-wgpf-jwqj-8h8p) — keeps only the last value of a repeated request header. Fix is available and **non-breaking** via `npm audit fix`.

The advisory is **Lambda@Edge-adapter specific**. Our m

[Read the thread](https://github.com/bmdhodl/agent47/issues/633) · 2026-07-07 · closed · 1 comment

### Publish MCP server 0.2.2 to npm

`mcp-server/package.json`, `mcp-server/package-lock.json`, `mcp-server/src/index.ts`, and `mcp-server/server.json` all target `@agentguard47/mcp-server@0.2.2`, but npm latest is still `0.2.1`.

Verified on 2026-05-03:

```text
npm view @agentguard47/mcp-server version
0.2.1

npm view @agentguard47/mcp-server@0.2.2 version
E404: @agentguard47/mcp-server@0.2.2 is not in this registry.
```

`npm --prefix mcp-server test`, registry metadata tests, release guard, `npm pack --dry-run`, and `npm publis

[Read the thread](https://github.com/bmdhodl/agent47/issues/428) · 2026-05-03 · closed · 1 comment

### security: gitleaks - 2 finding(s) - secret in git history: Detected a Generic API Key, potentially exposing access t

## Automated security scan: gitleaks

Created by SecurityAnalyst on 2026-04-22.
Report: `Reports/Security/analyst-2026-04-22.md`

## Findings (2 total)

- [P0] **secret in git history: Detected a Generic API Key, potentially exposing access to various services and sensitive operations.** [`agent47`]
  - Detail: rule=generic-api-key file=sdk/agentguard/guards.py line=354 commit=c1b319d0
  - Fix: ROTATE the credential immediately. git history rewrite alone does NOT make the secret safe - 

[Read the thread](https://github.com/bmdhodl/agent47/issues/380) · 2026-04-22 · closed · 1 comment

## Most recent

### security: gitleaks - 2 finding(s) - secret in git history: Detected a Generic API Key, potentially exposing access t

## Automated security scan: gitleaks

Created by SecurityAnalyst on 2026-04-20.
Report: `Reports/Security/analyst-2026-04-20.md`

## Findings (2 total)

- [P0] **secret in git history: Detected a Generic API Key, potentially exposing access to various services and sensitive operations.** [`agent47`]
  - Detail: rule=generic-api-key file=sdk/agentguard/guards.py line=354 commit=c1b319d0
  - Fix: ROTATE the credential immediately. git history rewrite alone does NOT make the secret safe - 

[Read the thread](https://github.com/bmdhodl/agent47/issues/377) · 2026-04-21 · closed · 1 comment

### T20: SDK examples expansion (3 real-world examples)

Create 3 new examples: fastapi_budget_middleware.py (web app integration), multi_agent_budget_sharing.py (shared team budget), dashboard_integration.py (full SDK-to-dashboard flow). Add to examples/ directory.

[Read the thread](https://github.com/bmdhodl/agent47/issues/174) · 2026-02-15 · closed · 0 comments

### Republish MCP server v0.2.0 to npm

## Context
QA audit found that the published npm package `@agentguard47/mcp-server@0.1.0` still has the old broken default URL (`agentguard.dev`). The source was fixed in commit 0661873 but never republished.

## Done (in b842981)
- Regenerated `package-lock.json` to resolve zod version mismatch
- Bumped version to 0.2.0
- Verified `npm ci && npm run build` succeeds
- Deleted duplicate test files (`test_cost_guardrail 2.py`, `e2e_cost_guardrail 2.py`)

## Remaining
- [ ] Run `cd mcp-server && np

[Read the thread](https://github.com/bmdhodl/agent47/issues/165) · 2026-02-15 · closed · 1 comment

### Fix MCP server default URL and ship working dist/

## Problem

The MCP server is non-functional out of the box:

1. `src/client.ts` line 1 sets `DEFAULT_URL = "https://agentguard.dev"` which does not resolve. Should be `https://app.agentguard47.com`.
2. `dist/` is not committed and not built during npm publish, so `@agentguard47/mcp-server` from npm is an empty package.
3. `zod` is imported in `index.ts` but not listed as an explicit dependency (transitive from `@modelcontextprotocol/sdk`).

## Fix

- Change default URL in `client.ts` to `https:

[Read the thread](https://github.com/bmdhodl/agent47/issues/152) · 2026-02-10 · closed · 0 comments

### T16: Cost guardrail documentation guide

## Context
Need the canonical guide for cost guardrails — the page linked from README, landing page, and onboarding.

## Acceptance Criteria
- [ ] `docs/cost-guardrails.md` with sections:
  - Why cost guardrails (the problem)
  - Quickstart (5 lines of code)
  - Configuration options (all BudgetGuard params)
  - How costs are calculated (model pricing, custom pricing)
  - Dashboard integration (HttpSink + budget config)
  - Alert setup (webhook + email)
  - FAQ
- [ ] All code examples are tested

[Read the thread](https://github.com/bmdhodl/agent47/issues/138) · 2026-02-09 · closed · 0 comments

### Span and event name length limits

No length validation on span/event/service names. Truncate to 1000 chars in TraceContext.span() and .event(). Log warning on truncation.

[Read the thread](https://github.com/bmdhodl/agent47/issues/117) · 2026-02-09 · closed · 1 comment

### Add public property accessors to guards for integration use

## Problem
LangChain integration (integrations/langchain.py lines 146-148) accesses private attributes like `self._budget_guard._max_tokens`. Fragile coupling that breaks if internals change.

## Fix
Add public read-only properties to BudgetGuard:
```python
@property
def max_tokens(self) -> Optional[int]:
    return self._max_tokens
```

Same for max_calls, max_cost_usd, current totals.

Then update LangChain integration to use public API.

## Files
- `sdk/agentguard/guards.py`
- `sdk/agentguard

[Read the thread](https://github.com/bmdhodl/agent47/issues/114) · 2026-02-09 · closed · 0 comments

### GA launch checklist and materials

## Summary
Pre-launch checklist to verify everything is ready for public promotion.

## Tasks
- [ ] Verify repo is public
- [ ] Verify `pip install agentguard47` works and installs latest
- [ ] Verify all README links work (no 404s)
- [ ] Verify all integration examples run without error
- [ ] Verify PyPI page has correct metadata, description, classifiers
- [ ] Draft blog post for launch announcement
- [ ] Draft social media posts (Twitter, Reddit, HN)
- [ ] Verify LICENSE file is correct
- [ ]

[Read the thread](https://github.com/bmdhodl/agent47/issues/79) · 2026-02-09 · closed · 1 comment

The remaining reports are on [the project's issue tracker](https://github.com/bmdhodl/agent47/issues).