pod
Other formats agents might prefer:
markdownjsonllms.txt

Agent? You probably want markdown or json, or Pod over MCP.

Reported issues for agentguard47

Pod holds 16 of 21 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user.

Back to agentguard47.

Most discussed

security: mcp-server npm audit — fast-uri (high), hono + qs (moderate)

Vulnerability

Severity: high (1) + moderate (2) Source: Nightshift supervisor security scan 2026-06-09 Package/file: mcp-server/package-lock.json (present on main)

Package Severity Advisory
fast-uri high <=3.1.1
hono moderate <=4.12.20
qs moderate 6.11.1–6.15.1 — GHSA-q8mj-m7cp-5q26 (qs.stringify DoS on null/undefined comma-format array entries w/ encodeValuesOnly)

All three are confirmed on the committed main lockfile (not ju

Read the thread · 2026-06-09 · closed · 16 comments

Switch PyPI publish workflow to Trusted Publishing

Summary

The v1.2.3 publish succeeded, but the publish workflow emitted this warning:

The workflow was run with the attestations: true input, but an explicit password was also set, disabling Trusted Publishing. As a result, the attestations input is ignored.

Why this matters

We are already generating build provenance, but PyPI attestations are not actually being used while the workflow authenticates with PYPI_TOKEN. Moving to Trusted Publishing would reduce secret management risk

Read the thread · 2026-03-28 · closed · 10 comments

security: hono high-severity advisories in mcp-server (non-breaking fix)

Vulnerability

Severity: high Source: Nightshift supervisor security scan 2026-07-12 Package/file: mcp-server/ -> hono (installed <=4.12.24)

Details

npm audit in mcp-server/ reports 1 high-severity chain, all via hono. Notable advisories in the bundle:

  • Path traversal in serve-static on Windows via encoded backslash (%5C)
  • CORS middleware reflects any Origin with credentials when origin defaults to wildcard
  • IP Restriction bypasses static deny rules for no

Read the thread · 2026-07-12 · closed · 3 comments

security: hono high-severity advisories in mcp-server (bump hono)

Vulnerability

Severity: high Source: Nightshift supervisor security scan 2026-07-06 Package: hono (range <=4.12.24) via mcp-server/

Details

npm audit in mcp-server/ reports 1 high with 9 chained advisories in hono, including:

  • GHSA-wwfh-h76j-fc44 — path traversal in serve-static on Windows via encoded backslash (%5C)
  • GHSA-88fw-hqm2-52qc — CORS middleware reflects any Origin with credentials on wildcard default
  • GHSA-f577-qrjj-4474 — JWT middleware accepts any Au

Read the thread · 2026-07-06 · closed · 2 comments

lead_captures: RLS disabled + new external 'tool_capture' source from marketing site

Heads-up from the bmdpat marketing site about the shared public.lead_captures table (Supabase project xlvbwvplsekotnkjehke). Two things for the AgentGuard side to be aware of / decide on.

1. New external source='tool_capture' rows (additive)

The marketing tools (/tools/quant-compare, /tools/vram-calculator) now log email captures into lead_captures. To do this the source CHECK constraint was extended additively:

-- before: shared_trace, protection_report, sign_u

[Read the thread](https://github.com/bmdhodl/agent47/issues/566) · 2026-06-02 · closed · 2 comments

### security: npm audit — 1 high (hono) in mcp-server, non-breaking fix

## Vulnerability

**Severity:** high (npm audit) — but **no real exposure in our context** (see below)
**Source:** Nightshift supervisor security scan 2026-07-07
**Package/file:** `mcp-server/` → transitive `hono`

## Details
`cd mcp-server && npm audit` reports 1 high: hono Lambda@Edge adapter advisory (GHSA-wgpf-jwqj-8h8p) — keeps only the last value of a repeated request header. Fix is available and **non-breaking** via `npm audit fix`.

The advisory is **Lambda@Edge-adapter specific**. Our m

[Read the thread](https://github.com/bmdhodl/agent47/issues/633) · 2026-07-07 · closed · 1 comment

### Publish MCP server 0.2.2 to npm

`mcp-server/package.json`, `mcp-server/package-lock.json`, `mcp-server/src/index.ts`, and `mcp-server/server.json` all target `@agentguard47/mcp-server@0.2.2`, but npm latest is still `0.2.1`.

Verified on 2026-05-03:

```text
npm view @agentguard47/mcp-server version
0.2.1

npm view @agentguard47/mcp-server@0.2.2 version
E404: @agentguard47/mcp-server@0.2.2 is not in this registry.

npm --prefix mcp-server test, registry metadata tests, release guard, npm pack --dry-run, and `npm publis

Read the thread · 2026-05-03 · closed · 1 comment

security: gitleaks - 2 finding(s) - secret in git history: Detected a Generic API Key, potentially exposing access t

Automated security scan: gitleaks

Created by SecurityAnalyst on 2026-04-22. Report: Reports/Security/analyst-2026-04-22.md

Findings (2 total)

  • [P0] secret in git history: Detected a Generic API Key, potentially exposing access to various services and sensitive operations. [agent47]
    • Detail: rule=generic-api-key file=sdk/agentguard/guards.py line=354 commit=c1b319d0
    • Fix: ROTATE the credential immediately. git history rewrite alone does NOT make the secret safe -

Read the thread · 2026-04-22 · closed · 1 comment

Most recent

security: gitleaks - 2 finding(s) - secret in git history: Detected a Generic API Key, potentially exposing access t

Automated security scan: gitleaks

Created by SecurityAnalyst on 2026-04-20. Report: Reports/Security/analyst-2026-04-20.md

Findings (2 total)

  • [P0] secret in git history: Detected a Generic API Key, potentially exposing access to various services and sensitive operations. [agent47]
    • Detail: rule=generic-api-key file=sdk/agentguard/guards.py line=354 commit=c1b319d0
    • Fix: ROTATE the credential immediately. git history rewrite alone does NOT make the secret safe -

Read the thread · 2026-04-21 · closed · 1 comment

T20: SDK examples expansion (3 real-world examples)

Create 3 new examples: fastapi_budget_middleware.py (web app integration), multi_agent_budget_sharing.py (shared team budget), dashboard_integration.py (full SDK-to-dashboard flow). Add to examples/ directory.

Read the thread · 2026-02-15 · closed · 0 comments

Republish MCP server v0.2.0 to npm

Context

QA audit found that the published npm package @agentguard47/mcp-server@0.1.0 still has the old broken default URL (agentguard.dev). The source was fixed in commit 0661873 but never republished.

Done (in b842981)

  • Regenerated package-lock.json to resolve zod version mismatch
  • Bumped version to 0.2.0
  • Verified npm ci && npm run build succeeds
  • Deleted duplicate test files (test_cost_guardrail 2.py, e2e_cost_guardrail 2.py)

Remaining

  • Run `cd mcp-server && np

Read the thread · 2026-02-15 · closed · 1 comment

Fix MCP server default URL and ship working dist/

Problem

The MCP server is non-functional out of the box:

  1. src/client.ts line 1 sets DEFAULT_URL = "https://agentguard.dev" which does not resolve. Should be https://app.agentguard47.com.
  2. dist/ is not committed and not built during npm publish, so @agentguard47/mcp-server from npm is an empty package.
  3. zod is imported in index.ts but not listed as an explicit dependency (transitive from @modelcontextprotocol/sdk).

Fix

  • Change default URL in client.ts to `https:

Read the thread · 2026-02-10 · closed · 0 comments

T16: Cost guardrail documentation guide

Context

Need the canonical guide for cost guardrails — the page linked from README, landing page, and onboarding.

Acceptance Criteria

  • docs/cost-guardrails.md with sections:
    • Why cost guardrails (the problem)
    • Quickstart (5 lines of code)
    • Configuration options (all BudgetGuard params)
    • How costs are calculated (model pricing, custom pricing)
    • Dashboard integration (HttpSink + budget config)
    • Alert setup (webhook + email)
    • FAQ
  • All code examples are tested

Read the thread · 2026-02-09 · closed · 0 comments

Span and event name length limits

No length validation on span/event/service names. Truncate to 1000 chars in TraceContext.span() and .event(). Log warning on truncation.

Read the thread · 2026-02-09 · closed · 1 comment

Add public property accessors to guards for integration use

Problem

LangChain integration (integrations/langchain.py lines 146-148) accesses private attributes like self._budget_guard._max_tokens. Fragile coupling that breaks if internals change.

Fix

Add public read-only properties to BudgetGuard:

@property
def max_tokens(self) -> Optional[int]:
    return self._max_tokens

Same for max_calls, max_cost_usd, current totals.

Then update LangChain integration to use public API.

Files

  • sdk/agentguard/guards.py
  • `sdk/agentguard

Read the thread · 2026-02-09 · closed · 0 comments

GA launch checklist and materials

Summary

Pre-launch checklist to verify everything is ready for public promotion.

Tasks

  • Verify repo is public
  • Verify pip install agentguard47 works and installs latest
  • Verify all README links work (no 404s)
  • Verify all integration examples run without error
  • Verify PyPI page has correct metadata, description, classifiers
  • Draft blog post for launch announcement
  • Draft social media posts (Twitter, Reddit, HN)
  • Verify LICENSE file is correct
  • [ ]

Read the thread · 2026-02-09 · closed · 1 comment

The remaining reports are on the project's issue tracker.