Reported issues for mcp

Pod holds 19 of 33 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user.

Back to mcp.

Most discussed

[P0][Ecosystem] List QVeris MCP server on MCP registries (mcp.so / Smithery / Glama / PulseMCP)

背景

MCP 注册表是 2026 年 agent 用户发现工具服务器的主入口:mcp.so 已索引 2 万+ 服务器,Smithery、Glama、PulseMCP 也是主流目录。@qverisai/mcp 目前未系统性上架,属于近乎零成本的高曝光渠道。

工作内容

• 盘点各注册表的提交方式(PR / 表单 / manifest)并逐一上架:mcp.so、smithery.ai、glama.ai/mcp、PulseMCP、punkpeye/awesome-mcp-servers
• 统一 listing 文案(能力路由 + 统一计费审计的差异化定位,双语)
• 上架信息与 npm README 保持一致,注明 stdio 安装方式(远程 MCP 上线后更新,见 #107)
• 建立发版后的 listing 更新 checklist(可加入发版流程文档)

验收标准

• 上述注册表均可搜索到 QVeris,安装说明可用
• listing 指向的安装命令实测通过

Read the thread · 2026-07-06 · closed · 5 comments

[统一能力平台] SDK/CLI 支持 API Key、OAuth Device Flow 与 Agent Delegation

背景

toolkit 需要在保留 API Key 兼容性的同时，为交互式用户、无浏览器终端和 Agent 提供统一的凭证抽象。这个 parent issue 只跟踪公开客户端能力；Authorization Server、Resource Server 和计费服务的实现不属于本仓库。

2026-07-18 状态审计

Phase 0 已由 #226 / #231 完成。Phase 1 已由 #227 / #250 完成，并已基于两个受支持测试部署的公开 Device Authorization、refresh rotation 与 revoke 契约完成验证。

Phase 2 仍缺少完整、可验证的公开 token exchange / Agent Delegation 契约，包括受众绑定、scope/resource/预算收窄规则、错误结构和测试 fixtures。因此 parent issue 继续保持 blocked，不实现猜测性的 delegation 客户端。正式部署的 Device Flow 上线和发布验收属于外部服务发布动作，不影响 toolkit Pha

Read the thread · 2026-07-11 · open · 4 comments

[SDK] Safe paid Call controls and request context

背景

该 issue 跟踪生产 Agent 所需的通用客户端安全控制与请求上下文透传。范围限定为公开客户端能力；服务端实现和未发布接口不属于本仓库。

Track A：客户端安全控制

• Python、JavaScript SDK、CLI 和 MCP 的 paid Call 默认 strict single-submit。
• paid Call 不自动重试 429/503、timeout、transport 或 OAuth 401，也不静默删除投影字段后重放。
• 仅保留显式、deprecated 的 legacy projection replay，并记录实际 HTTP attempts。
• Python SDK 提供 credential-safe typed errors、不可变 RequestMetadata、operation-aware CredentialContext。
• read/call timeout、transport、limits、shared/owned client 生命周期

Read the thread · 2026-07-28 · closed · 3 comments

[Auth] Add Agent Delegation credential exchange

背景

Parent: #200

Agent 场景需要把用户凭证交换为短期、最小权限、不可刷新的 delegation token。目前公开 discovery/OpenAPI 尚未提供 token exchange、delegation claims、audience/resource 绑定或稳定错误契约，因此不能实现或公开猜测性接口。

本 issue 先固定客户端安全边界，状态保持 blocked；公开契约满足开始条件后再实现。

开始条件

• discovery 或公开 OpenAPI 声明 token exchange/delegation endpoint 与 grant/type。
• scope、resource/audience、run_id、预算及 tool/model 限制的 claims 契约稳定。
• Resource Server 可验证 issuer、audience、expiry 与收窄约束。
• public test client 和成功/失败 fixtures 可用。
• revoke/int

Read the thread · 2026-07-15 · open · 3 comments

[Product/Roadmap] Triggers/webhooks + qveris listen

This issue now tracks only the public client work for triggers/webhooks and a local qveris listen forwarder.

Per-user OAuth lifecycle work is tracked by #200, #227, and #228. Hosted MCP rollout is no longer tracked by this issue.

Status: blocked

Toolkit implementation must wait for a stable, public triggers/webhooks contract. Do not introduce guessed endpoints, event schemas, signatures, retry behavior, or CLI commands before that contract is available.

Scope

• Discover supported tr

Read the thread · 2026-07-10 · open · 3 comments

[P2][OpenClaw] Align endpoint selection with deterministic base URL configuration

Problem

The OpenClaw plugin exposes a region option and derives its API endpoint from that value at runtime. This differs from the deterministic endpoint contract used by the CLI, MCP server, JavaScript SDK, and Python SDK.

Proposed behavior

• Define precedence as explicit config.baseUrl > QVERIS_BASE_URL > built-in default.
• Never derive the endpoint from an API key or legacy region setting.
• Formally deprecate region in the schema so existing configurations receive an actionable mig

Read the thread · 2026-07-14 · closed · 2 comments

[P1][Toolkit] OpenTelemetry observability: spans for discover/call with credits attributes

背景

企业选型清单项,同类竞品均提供 tracing。QVeris 已有 execution_id / search_id / billing 数据,天然适合做 span 关联。

工作内容

• Python SDK:optional extra(qveris[otel])输出 spans:discover/inspect/call,attributes 含 tool_id、search_id、execution_id、elapsed_time_ms、credits(pre-settlement)
• MCP server:同样的 span 语义(可通过 env 开关)
• 不安装 otel 依赖时零开销、零行为变化
• 文档:接入 Jaeger/任意 OTLP collector 的示例

验收标准

• spans 可在标准 OTLP 后端看到,execution_id 可与 usage/ledger 关联
• 主包依赖不增重(otel 为 optional)

Read the thread · 2026-07-06 · closed · 2 comments

[P1][SDK] Framework adapters: LangChain / CrewAI / OpenAI Agents SDK

背景

竞品(Composio 等)的核心获客路径是"一行代码接入主流 agent 框架"。QVeris Python SDK 目前只有自带 agent loop 和 OpenAI 兼容 provider,没有框架适配器,接入 LangChain/CrewAI 等框架的用户需要自己包装 discover/call。

工作内容

• qveris.integrations.langchain:把 discover/inspect/call 封装为 LangChain tools(一个动态 toolkit,discover 结果可转成 Tool 列表)
• qveris.integrations.crewai:CrewAI tool 封装
• qveris.integrations.openai_agents:OpenAI Agents SDK function tool 封装
• 各适配器 examples + 文档(quickstart ≤ 10 分钟)
• 适配器作为 optional extras 发布(`pip i

Read the thread · 2026-07-06 · closed · 2 comments

Most recent

feat(mcp): add complete tool annotations for registry review compatibility

Background

During the Smithery publication review for the QVeris Hosted MCP endpoint, the MCP tool catalog was found to omit annotations. Both the Hosted MCP service currently pinned to @qverisai/mcp@0.10.0 and the toolkit main line expose tools without the standard risk hints.

Missing annotations are interpreted conservatively by MCP clients and prevent registries from accurately presenting tool safety and approval expectations.

Scope

• Add complete MCP tool annotations at the `li

Read the thread · 2026-08-26 · closed · 0 comments

[Contract] Add typed Capability Resolve/Query clients after public API release

背景

从 #273 拆分 Capability Resolve/Query 客户端 Track B。Track A 的付费 Call 安全、凭证安全、operation policy、transport/lifecycle 和请求上下文已独立完成，不应继续与尚未发布的 Capability API 客户端绑在同一个 P0 issue 中。

当前已同步的 Public OpenAPI 2026-07-30.1 尚未声明 Capability Resolve/Query 路径、selection token 或对应的 typed success/error fixtures。客户端不得根据内部实现或非公开约定猜测 endpoint、字段和错误码。

启动条件

• Public OpenAPI 发布版本化 Capability contract/detail、resolve 和 query 路径。
• Resolve 请求公开 parameters、hard constraints、billing constraint 与确定性报价语义。
• S

Read the thread · 2026-08-10 · open · 0 comments

Plugin loads but registers zero tools on OpenClaw >=2026.6.11 — missing contracts.tools in openclaw.plugin.json

Problem

After installing @qverisai/qveris on OpenClaw >=2026.6.11, the plugin loads (status: loaded, enabled: true) but registers zero tools:

$ openclaw plugins inspect qveris --runtime --json | jq '.plugin | {status, toolNames}'
{
  "status": "loaded",
  "toolNames": []
}

diagnostics shows a single error:

{
  "level": "error",
  "pluginId": "qveris",
  "message": "plugin must declare contracts.tools before registering agent tools"
}

Root cause

Ope

Read the thread · 2026-07-26 · closed · external user · 1 comment

[Clients] Add zero-cost tools probe support across CLI, MCP, JavaScript, and Python

Problem

The public API now exposes POST /tools/probe for zero-cost preflight validation, but the CLI, MCP server, JavaScript SDK, and Python SDK do not yet provide first-class access to it.

Scope

• Add typed request and response models for schema, quote, coverage, and sample checks.
• Add probe methods to the shared HTTP clients.
• Add a canonical MCP probe tool with an output schema.
• Add a CLI probe command supporting candidate parameters, requested checks, and `live_

Read the thread · 2026-07-22 · closed · 0 comments

[P2][MCP] 完善 Hosted Server Card 鉴权元数据与 schema 可验证性

背景

2026-07-16 对两套 Hosted MCP 测试环境验收时发现，两张 Server Card 的内容可以通过 MCP experimental extension 仓库中签入的 schema.json 校验，但公开声明的 $schema 地址 https://static.modelcontextprotocol.io/schemas/v1/server-card.schema.json 当前返回 404。同时，remotes[0] 只声明 endpoint 与协议版本，没有声明 Hosted MCP 所需的 Authorization: Bearer <API Key> 配置输入，自动发现客户端无法从 Card 得知如何安全配置凭据。

该问题归属 toolkit：Server Card 类型、schema 常量与构造逻辑位于 packages/mcp/src/server-card.ts。Website 只负责为官方托管服务提供公开 URL 和站点配置；不应在私有服务层复制通用 Server Card schema。

该问题发现于 H

Read the thread · 2026-07-16 · closed · 0 comments

[Auth] Add CLI Device Flow, refresh rotation, and revoke lifecycle

背景

Parent: #200

CLI 需要面向无浏览器终端的标准 Device Authorization Grant，并支持 refresh rotation、logout/revoke 与安全存储。两个受支持测试部署现已提供一致、可验证的公开契约，toolkit 实现由 #250 跟踪。

开始条件

• 所有受支持测试部署的 discovery 均声明 device authorization endpoint。
• token endpoint 明确支持 device code 与 refresh_token grant。
• 内置 public CLI client qveris-cli、scope/resource 规则已公开且可测试。
• authorization_pending、slow_down、access_denied、expired_token、invalid_grant 的错误契约稳定。
• revoke 能力与 refresh-token rotation 规则可验证。

Read the thread · 2026-07-15 · closed · 1 comment

[P1][Auth] Introduce API-key-compatible credential providers across CLI and SDKs

背景

Parent: #200

当前 CLI、JavaScript SDK 和 Python SDK 直接持有 API Key。为未来接入短期凭证，需要先将请求层改为依赖统一的 credential provider，同时完全保留现有 API Key 行为。

本 issue 只做本地抽象和兼容性改造，不新增 OAuth endpoint、grant 或登录命令。

范围

• 定义最小 credential provider contract，允许同步或异步取得请求凭证。
• 为现有 API Key 提供默认 provider。
• CLI、JavaScript SDK、Python SDK 的公共构造参数和环境变量继续兼容。
• 请求层统一从 provider 获取 Authorization 值，不让各资源客户端复制认证逻辑。
• provider 能接收目标 resource/scopes 上下文，但 API Key provider 不据此改变 endpoint。
• 凭证不得出现在日志、异常、telemetry、repr 或普通诊断输出中。

Read the thread · 2026-07-15 · closed · 0 comments

[P2][Dependencies] Upgrade the Vitest toolchain to audited Node 18-compatible versions

Problem

The MCP package, JavaScript SDK, and OpenClaw plugin use a vulnerable Vitest 2.x development toolchain. A full npm audit reports the same development-only findings in each package: 2 critical, 1 high, and 3 moderate vulnerabilities across Vitest, coverage-v8, Vite, esbuild, the Vitest mocker, and vite-node.

Production dependency audits report zero vulnerabilities, so published runtime consumers are not directly affected. The development and CI toolchain still needs remediation.

Read the thread · 2026-07-14 · closed · 0 comments

[P1][OpenClaw] Align Node support and make plugin builds reproducible

Problem

The OpenClaw plugin release contract is internally inconsistent:

• The package declares Node.js >=18.2.0 and OpenClaw >=2026.3.22.
• Typechecking against OpenClaw 2026.3.22 fails because the current plugin code relies on newer plugin SDK types; the effective tested host is 2026.6.11.
• The current development host requires Node.js >=22.19.0, while its locked development toolchain requires Node.js 22.22.2 or newer on the Node 22 line.
• CI and publishing use Node.js 20, and esbuild t

Read the thread · 2026-07-14 · closed · 0 comments

[P2] 收敛客户端 API base URL override 并移除公开路由细节

摘要

CLI、MCP、JavaScript SDK 和 Python SDK 的 API endpoint 行为需要保持一致：显式配置必须优先，API key 元数据或旧的隐式路由规则不能改变请求目标，公开文档也不应暴露内部路由细节。

现象

• CLI、MCP 和 JavaScript SDK 的 endpoint 解析曾混合显式配置与隐式路由推断。
• Python SDK 虽不做隐式推断，但 endpoint override 缺少一致的安全校验和规范化。
• 测试或自定义部署若未正确覆盖地址，存在误调用内置默认端点的风险。
• 部分公开帮助和文档描述了内部路由策略，而不是稳定的用户配置契约。

根因

• endpoint resolution 同时承担用户配置与内部部署选择，边界不清晰。
• 显式参数、环境变量和隐式推断之间缺少统一且经过测试的优先级。
• 各 package 对 URL 校验、尾部斜杠和错误输出的处理不一致。

方案

1. 将 QVERIS_BASE_URL 作为唯一公开的 API 地址环境变量 override。
2. 统

Read the thread · 2026-07-13 · closed · 0 comments

[P1][Docs] Runnable examples for js-sdk / MCP / CLI; recipes runnable + CI-validated

Examples are Python-only (14 runnable scripts). js-sdk, mcp and cli have zero examples directories; recipes/ entries are manifest+README only, with no runnable code and no CI validation of the manifests.

Fix

• packages/js-sdk/examples/ — TS quickstart, Vercel-AI agent, retry/observability
• MCP + CLI example snippets (agent-loop driving the MCP server; CLI scripting patterns)
• Make at least the flagship recipes runnable; validate all qveris.manifest.json against the schema

Read the thread · 2026-07-10 · closed · 0 comments

The remaining reports are on the project's issue tracker.