pod
Other formats agents might prefer:
markdownjsonllms.txt

Agent? You probably want markdown or json, or Pod over MCP.

Reported issues for Delimit

Pod holds 6 of 6 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user.

Back to Delimit.

Most discussed

MCP server processes accumulate to ~1500 under abnormal client disconnects → CPU/OOM (add orphan/idle self-termination)

Summary

The Delimit MCP server (server.py, FastMCP stdio, ~220 tools) accumulates hundreds-to-~1500 orphaned processes over a few days of normal multi-session use, causing CPU spikes and near-OOM on the host. The server has no self-termination defense when a client disconnects abnormally, so each leaked instance — a heavy 220-tool Python process — survives indefinitely.

Environment

  • delimit-cli 4.13.1, server reports "220 tools"
  • macOS (Apple Silicon), Python 3.14
  • Server: `~

Read the thread · 2026-06-24 · closed · external user · 4 comments

MCP server processes accumulate to ~1500 under abnormal client disconnects → CPU/OOM (add orphan/idle self-termination)

Summary

The Delimit MCP server (server.py, FastMCP stdio, ~220 tools) accumulates hundreds-to-~1500 orphaned processes over a few days of normal multi-session use, causing CPU spikes and near-OOM on the host. The server has no self-termination defense when a client disconnects abnormally, so each leaked instance — a heavy 220-tool Python process — survives indefinitely.

Environment

  • delimit-cli 4.13.1, server reports "220 tools"
  • macOS (Apple Silicon), Python 3.14
  • Server: `~

Read the thread · 2026-06-24 · closed · external user · 4 comments

Disclose telemetry collection in README

Hi maintainers,

Thanks for building this tool!

While using it, I noticed that _with_next_steps() in gateway/ai/server.py uploads event data to an external service. Specifically, it syncs events to Supabase:

from ai.supabase_sync import sync_event as _sync_event_to_cloud
_sync_event_to_cloud(event)

Since this involves sending data off the user's machine, I think it should be clearly disclosed in the README so users can make an informed decision about using the tool (and opt

Read the thread · 2026-04-22 · closed · external user · 4 comments

Disclose telemetry collection in README

Hi maintainers,

Thanks for building this tool!

While using it, I noticed that _with_next_steps() in gateway/ai/server.py uploads event data to an external service. Specifically, it syncs events to Supabase:

from ai.supabase_sync import sync_event as _sync_event_to_cloud
_sync_event_to_cloud(event)

Since this involves sending data off the user's machine, I think it should be clearly disclosed in the README so users can make an informed decision about using the tool (and opt

Read the thread · 2026-04-22 · closed · external user · 4 comments

[Security] Command Injection via LLM-Controlled repo Parameter in delimit_sensor_github_issue

Hi,

I'm a security researcher conducting a systematic study of MCP server security. During our analysis of publicly available MCP servers on the official registry, we identified a command injection vulnerability in your server.

Note: This issue also applies to delimit-ai/delimit, which contains identical code.

Vulnerability: The delimit_sensor_github_issue tool handler passes LLM-controlled repo and issue_number parameters to subprocess.run() via f-string interpolation into `g

Read the thread · 2026-04-06 · closed · external user · 5 comments

[Security] Command Injection via LLM-Controlled repo Parameter in delimit_sensor_github_issue

Hi,

I'm a security researcher conducting a systematic study of MCP server security. During our analysis of publicly available MCP servers on the official registry, we identified a command injection vulnerability in your server.

Note: This issue also applies to delimit-ai/delimit, which contains identical code.

Vulnerability: The delimit_sensor_github_issue tool handler passes LLM-controlled repo and issue_number parameters to subprocess.run() via f-string interpolation into `g

Read the thread · 2026-04-06 · closed · external user · 5 comments

Most recent

The remaining reports are on the project's issue tracker.