pod
Other formats agents might prefer:
markdownjsonllms.txt

Agent? You probably want markdown or json, or Pod over MCP.

Reported issues for Coder

Pod holds 24 of 79 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user.

Back to Coder.

Most discussed

Expose the agent timings in the /workspace/:workspaceId/timings endpoint

Right now, the timings endpoint returns only provisioner timings but we also want to include the agent timings to display them in the UI.

Related to:

Read the thread · 2024-09-30 · closed · outside contributor · 5 comments

Logout fails to clear OpenID Connect session - coder/zitadel integration

Describe the Bug

We use self-hosted Coder with OpenID Connect by ZITADEL v2.55.2 in a lab environment. Multiple scientists use Coder on a shared lab computer. When they log out successfully and are redirected back to the login page, the session is still active at ZITADEL. If a different scientist clicks the "OpenID Connect" button, it will directly redirect them to the dashboard of the previous scientist without prompting for a us

Read the thread · 2024-07-16 · open · external user · 5 comments

Documentation request: please add this solution for coder's embedded DERP server behind an istio ingress reverse proxy

I am very happy with the 'health' tab in the coder ui, which revealed to me that the embedded derp server was not accessible. The help documentation which I was then pointed to, was helpful as well. If you could add the following solution somehow somewhere, this will save all people with the same problem the two days it took me to find this solution.

When coder is installed inside an istio mesh, and your ingress is managed by istio, you have to apply the following manifest:

apiVersion: 

[Read the thread](https://github.com/coder/coder/issues/11821) · 2024-01-25 · closed · external user · 6 comments

### Coder "app" connections are not recorded as workspace usage for the purposes of detecting idle state

We are currently using code-server as a web app, via the `coder_app` resource.

It appears as though connections through this endpoint do not get recorded as workspace usage, therefore the auto-stop behaviour can still occur while in use.

[Read the thread](https://github.com/coder/coder/issues/11812) · 2024-01-24 · closed · outside contributor · 9 comments

### AWS TLV(il-central-1) Region is not supported

Hi!

We had an issue with setting up coder environment above EC2's in AWS TLV region.
We have our own coder server that is implemented in K8S cluster with only 1 pod.
And we have a template that is created with Terraform in order to set this remote DEV env for the users.

The problem is the fact that we are getting this error while trying to set up the EC2 instance in the TLV region:

2023-10-18 07:45:05.455 [warn] run exited with error ... error= exchange token:

Read the thread · 2023-10-30 · closed · external user · 8 comments

New templates purposely with no permissions (RBAC)

A customer reported a suggestion to allow new templates have no RBAC (groups).

Existing state is the Everyone group is attached to any new template.

This is a very good enterprise suggestion akin to zero trust then add permissions later.

Read the thread · 2023-05-24 · closed · outside contributor · 13 comments

Readiness, Liveness probes always failing

Description

I am installing coder v2 on my Kubernetes cluster, the installation goes well, but the Coder pod is not running, and when I get into the pod's describe, it says that both Readiness and Liveness probes fails, due connection problems.

I am using the following official documentation https://coder.com/docs/coder-oss/latest/install/kubernetes.

I tried it on both Minikube, and a baremetal Kubernetes Cluster (kubeadm based installation), and I am having the same problem on both

Read the thread · 2023-01-04 · closed · external user · 9 comments

Broken migration on v2 dogfood instance

Migration 000030_template_version_created_by.up.sql causes the following problem:

Jul 14 20:51:19 coder coder[29928]: 2022-07-14 20:51:19.062 [DEBUG]        (postgres.stdlib)        <./../../fergusstrange/embedded-postgres/logging.go:47>        (*syncedLogger).flush        ...
Jul 14 20:51:19 coder coder[29928]:   "msg": 2022-07-14 20:51:18.958 UTC [29945] ERROR:  column "created_by" of relation "template_versions" contains null values
Jul 14 20:51:19 coder coder[29928]:          202

[Read the thread](https://github.com/coder/coder/issues/2998) · 2022-07-14 · closed · outside contributor · 6 comments

## Most recent

### AI Bridge rejects Responses requests carrying Codex's `namespace` tool type ("malformed request: … unknown tool type")

Cross-filed from coder/aibridge#285 per the aibridge README (issues tracked here).

## Summary

AI Bridge (coder server v2.35.6, Premium) returns a 400 for any `/v1/responses` request whose `tools[]` contains an entry of type `namespace` — the tool type Codex CLI ≥ ~0.149.x sends for its multi-agent feature (`multi_agent_v1`), which appears to be on by default. Since the tool *definition* is rejected at request parse time, every Codex request fails deterministically, not just multi-agent turns:

[Read the thread](https://github.com/coder/coder/issues/28656) · 2026-08-26 · closed · external user · 3 comments

### Coder Agents: cannot select a model via the Chats API (model_config_id UUID is not discoverable)

### Summary
With Coder Agents (experimental Chats API), there is no usable way to select
which model a chat runs on when creating it programmatically. Model selection
effectively only works through the UI "default" star, which is not applicable
to API- or CI-driven usage.

### What I observed
`POST /api/experimental/chats` accepts an optional `model_config_id`, but that
field expects a **UUID**:

    {"message":"Request body must be valid JSON.","detail":"invalid UUID length: 0"}

However, the e

[Read the thread](https://github.com/coder/coder/issues/27915) · 2026-08-06 · closed · external user · 3 comments

### bug: streaming Responses API records no token usage when no MCP proxier is configured

### Is there an existing issue for this?

- [X] I have searched the existing issues

### Current Behavior

A streaming interception on the OpenAI Responses API route (`/openai/v1/responses`) records **zero** token usage when the `RequestBridge` is constructed with a nil `mcp.ServerProxier`. The client still receives the complete streamed response and a `200`, so the request looks entirely healthy; only the usage record is missing.

`recordTokenUsage` is called from inside the MCP branch in `aibr

[Read the thread](https://github.com/coder/coder/issues/27885) · 2026-08-05 · closed · external user · 1 comment

### MCP: `coder_create_workspace` unusable by LLMs — `rich_parameters` is a required object with no `additionalProperties`

## Summary

The `rich_parameters` input schema for `coder_create_workspace` declares a bare `{"type": "object"}` — no `properties`, no `additionalProperties` — and lists it in `required`. Frontier models cannot generate a value for a property-less object schema; they degrade it to a string (`""`, `"\t"`). Because the field is also `required`, there is no legal fallback: omitting it, `null`, and a JSON-encoded string are all rejected too.

The result is a hard loop. An agent retries `rich_paramet

[Read the thread](https://github.com/coder/coder/issues/27872) · 2026-08-05 · open · external user · 1 comment

### feat: least-privilege DERP admission endpoint for external derper

### Problem

We run Coder v2.34.7 as a single-replica AGPL deployment and use an external Tailscale `derper` on a public TCP port because the workspace network is nested inside another WireGuard/Tailnet layer. Direct connections do not work reliably at the available MTU, so the external DERP is intentionally the data path.

A public derper supports `--verify-client-url`, but Coder currently has no least-privilege admission endpoint that can answer `tailcfg.DERPAdmitClientRequest` for Coder's own

[Read the thread](https://github.com/coder/coder/issues/27861) · 2026-08-04 · closed · external user · 2 comments

### bug: GPT agent chats reject zero-argument MCP tools with properties: null

### Is there an existing issue for this?

- [X] I have searched the existing issues.

### Current Behavior

Coder Agent chats using an OpenAI/GPT-backed model fail before tool execution when an MCP server exposes a zero-argument tool.

The tool used to reproduce this is Tidewave's `get_ecto_schemas`. Its MCP schema is valid and includes an explicit empty object:

```json
{
  "type": "object",
  "properties": {}
}

In a GPT-backed Coder chat, attempting to use that tool fails with HTTP 400. I

Read the thread · 2026-07-15 · open · external user · 2 comments

fix: MCP stdio subprocess inherits agent temp cwd causing spawn sh ENOENT when temp dir is cleaned up

Describe the bug

When an MCP server is configured via .mcp.json with a stdio transport (e.g. npx/npm), the subprocess fails with spawn sh ENOENT even though sh exists in PATH.

The root cause is that createTransport in agent/x/agentmcp/manager.go does not set cmd.Dir when creating the exec.Cmd for the MCP subprocess. As a result, the subprocess inherits the coder agent's current working directory, which is a temporary directory (/tmp/coder.*) that gets cleaned up.

Read the thread · 2026-07-07 · open · external user · 2 comments

Coder Connect tunnel not re-STUN'd on system wake; dead for minutes after macOS sleep

Summary

After a macOS client sleeps and wakes, the Coder Connect tunnel to a workspace can stay unusable for several minutes. New dials fail with dial tcp [fd60:...]:22: i/o timeout until magicsock's periodic re-STUN re-homes the path on its own. VS Code Remote-SSH's resolver times out in that window and surfaces as "Reload Window" / UnparsableOutput.

Evidence (support bundle, macOS arm64, Coder Connect path)

  • Control plane healthy throughout (workspace/agent API calls return 200).

Read the thread · 2026-06-26 · closed · outside contributor · 2 comments

bug: Coder CLI DERP/tailnet dialer ignores HTTPS_PROXY in some connection paths

Is there an existing issue for this?

  • I have searched the existing issues

Current Behavior

coder ssh and VS Code Remote SSH can fail behind an HTTP(S) corporate proxy. Normal Coder API requests observe HTTPS_PROXY / HTTP_PROXY, and netcheck shows proxy-aware HTTP CONNECT, but the embedded Tailscale DERP HTTP client still attempts direct connections to the Coder/DERP host in at least some paths.

The observed failure is a timeout while connecting tailnet/DERP. Direct outbound

Read the thread · 2026-06-19 · open · external user · 1 comment

bug: Agent sends MCP tool names with invalid characters to Bedrock, causing HTTP 400 on the whole request

Is there an existing issue for this?

  • I have searched the existing issues

Current Behavior

Summary

When an MCP server's name (or tool name) contains characters outside [a-zA-Z0-9_-], the Coder agent forwards the tool definitions to AWS Bedrock verbatim. Bedrock validates every tool name against ^[a-zA-Z0-9_-]{1,128}$ and rejects the entire request with an HTTP 400, breaking the agent turn. The runtime should sanitize/validate tool names before calling Bedrock instead

Read the thread · 2026-06-12 · closed · external user · 2 comments

dbcrypt: Decrypt/Rotate miss several tables, causing FK violation on revoke

Disclosure: created using Claude Opus 4.7, validated by me

Running coder server dbcrypt decrypt (and rotate) fails when any of the following tables hold rows referencing dbcrypt_keys.active_key_digest:

  • crypto_keys.secret_key_id (migration 000251_crypto_keys.up.sql, Sep 2024)
  • mcp_server_configs.api_key_value_key_id, custom_headers_key_id, oauth2_client_secret_key_id (migration 000447_mcp_server_configs.up.sql)
  • mcp_server_user_tokens.access_token_key_id, `refresh_toke

Read the thread · 2026-05-15 · open · outside contributor · 1 comment

aibridge: successful Bedrock streaming responses logged as "interception failed" with error=EOF

Disclosure: issue identified and reproduced with the help of Claude Opus 4.7

Summary

When aibridge proxies a streaming /v1/messages request to AWS Bedrock and the upstream stream completes successfully, the interception is recorded as a failure with error=EOF. The client receives all events correctly — everything appears to work — but the server logs a misleading warning, the aibridge_interceptions_total{status="failed"} metric is incremented, and the OTel span is marked Error.

Read the thread · 2026-05-14 · closed · outside contributor · 1 comment

bug: A lot of parallel refresh token request with SSO Keycloak configuration

Is there an existing issue for this?

  • I have searched the existing issues

Current Behavior

Hello!

We are integrating Keycloak SSO with Coder and have encountered an issue where, upon access token expiration, refreshing the page triggers multiple parallel refresh token requests to Keycloak (typically between 2 to 5 requests). This behavior puts unnecessary load on our Keycloak server and could lead to rate limiting or performance degradation under high concurrency.

For test we

Read the thread · 2026-05-13 · open · external user · 4 comments

fix(cli): coder support bundle should default to current workspace when run inside one

Problem

When running coder support bundle inside a running workspace without passing the [owner/workspace] argument, the resulting bundle is missing critical workspace-specific information:

  • No workspace metadata
  • No agent logs (startup logs, connected agent info)
  • No connection diagnostics (DERP, agent dial)
  • No build logs or template version info

The command currently warns:

Running inside Coder workspace; this can affect results!
No workspace specified. This will re

[Read the thread](https://github.com/coder/coder/issues/24615) · 2026-04-22 · closed · outside contributor · 0 comments

### bug: Coder sessions should use a login session not just a shell

### Is there an existing issue for this?

- [x] I have searched the existing issues

### Current Behavior

I previously mentioned this a feature request in this discussion https://github.com/coder/coder/discussions/18805. But now it's moved onto not just being an annoyance but actually breaking functionality. Recent updates to snaps in Ubuntu now block running snaps in a Coder session when they work normally via SSH and it's due to the fact that Coder starts an interactive shell instead of a Log

[Read the thread](https://github.com/coder/coder/issues/24450) · 2026-04-16 · open · external user · 0 comments

### RFC: Signed receipts for agent tool calls in Coder workspaces

## Problem

Coder provides remote development environments where AI agents can operate with access to real infrastructure. When agents execute tool calls in production dev environments, organizations need cryptographic evidence of what happened — not just logs that could be modified after the fact.

## Proposal

Integrate Ed25519 receipt signing into Coder's agent tool execution pipeline. Each tool call would produce a signed receipt that can be independently verified offline. This is especially

[Read the thread](https://github.com/coder/coder/issues/24038) · 2026-04-05 · closed · external user · 1 comment

The remaining reports are on [the project's issue tracker](https://github.com/coder/coder/issues).