# Reported issues for Delimit

Pod holds 6 of 6 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user.

Back to [Delimit](/mcp/delimit).

## Most discussed

### MCP server processes accumulate to ~1500 under abnormal client disconnects → CPU/OOM (add orphan/idle self-termination)

## Summary

The Delimit MCP server (`server.py`, FastMCP stdio, ~220 tools) accumulates **hundreds-to-~1500 orphaned processes** over a few days of normal multi-session use, causing CPU spikes and near-OOM on the host. The server has no self-termination defense when a client disconnects abnormally, so each leaked instance — a heavy 220-tool Python process — survives indefinitely.

## Environment

- delimit-cli `4.13.1`, server reports "220 tools"
- macOS (Apple Silicon), Python 3.14
- Server: `~

[Read the thread](https://github.com/delimit-ai/delimit-mcp-server/issues/142) · 2026-06-24 · closed · external user · 4 comments

### MCP server processes accumulate to ~1500 under abnormal client disconnects → CPU/OOM (add orphan/idle self-termination)

## Summary

The Delimit MCP server (`server.py`, FastMCP stdio, ~220 tools) accumulates **hundreds-to-~1500 orphaned processes** over a few days of normal multi-session use, causing CPU spikes and near-OOM on the host. The server has no self-termination defense when a client disconnects abnormally, so each leaked instance — a heavy 220-tool Python process — survives indefinitely.

## Environment

- delimit-cli `4.13.1`, server reports "220 tools"
- macOS (Apple Silicon), Python 3.14
- Server: `~

[Read the thread](https://github.com/delimit-ai/delimit-mcp-server/issues/142) · 2026-06-24 · closed · external user · 4 comments

### Disclose telemetry collection in README

Hi maintainers,

Thanks for building this tool!

While using it, I noticed that `_with_next_steps()` in `gateway/ai/server.py` uploads event data to an external service. Specifically, it syncs events to Supabase:

```python
from ai.supabase_sync import sync_event as _sync_event_to_cloud
_sync_event_to_cloud(event)
```

Since this involves sending data off the user's machine, I think it should be clearly disclosed in the README so users can make an informed decision about using the tool (and opt 

[Read the thread](https://github.com/delimit-ai/delimit-mcp-server/issues/56) · 2026-04-22 · closed · external user · 4 comments

### Disclose telemetry collection in README

Hi maintainers,

Thanks for building this tool!

While using it, I noticed that `_with_next_steps()` in `gateway/ai/server.py` uploads event data to an external service. Specifically, it syncs events to Supabase:

```python
from ai.supabase_sync import sync_event as _sync_event_to_cloud
_sync_event_to_cloud(event)
```

Since this involves sending data off the user's machine, I think it should be clearly disclosed in the README so users can make an informed decision about using the tool (and opt 

[Read the thread](https://github.com/delimit-ai/delimit-mcp-server/issues/56) · 2026-04-22 · closed · external user · 4 comments

### [Security] Command Injection via LLM-Controlled repo Parameter in delimit_sensor_github_issue

Hi,

I'm a security researcher conducting a systematic study of MCP server security. During our analysis of publicly available MCP servers on the official registry, we identified a command injection vulnerability in your server.

> Note: This issue also applies to `delimit-ai/delimit`, which contains identical code.

**Vulnerability:** The `delimit_sensor_github_issue` tool handler passes LLM-controlled `repo` and `issue_number` parameters to `subprocess.run()` via f-string interpolation into `g

[Read the thread](https://github.com/delimit-ai/delimit-mcp-server/issues/40) · 2026-04-06 · closed · external user · 5 comments

### [Security] Command Injection via LLM-Controlled repo Parameter in delimit_sensor_github_issue

Hi,

I'm a security researcher conducting a systematic study of MCP server security. During our analysis of publicly available MCP servers on the official registry, we identified a command injection vulnerability in your server.

> Note: This issue also applies to `delimit-ai/delimit`, which contains identical code.

**Vulnerability:** The `delimit_sensor_github_issue` tool handler passes LLM-controlled `repo` and `issue_number` parameters to `subprocess.run()` via f-string interpolation into `g

[Read the thread](https://github.com/delimit-ai/delimit-mcp-server/issues/40) · 2026-04-06 · closed · external user · 5 comments

## Most recent

The remaining reports are on [the project's issue tracker](https://github.com/delimit-ai/delimit/issues).