# Reported issues for mcp-server

Pod holds 8 of 8 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user.

Back to [mcp-server](/mcp/mcp-server-7).

## Most discussed

### Minor upgrade for ajv - mcp-server

Find more live information in Aikido here: https://app.aikido.dev/repositories/2034799?sidebarIssue=35191958&groupId=96652&sidebarIssueTask=6450732&sidebarTab=tasks


### Scope
These issues affect the following code repository:
- mcp-server: package-lock.json


### TLDR
Ajv stores its registered `formats` in a plain JavaScript object, so a lookup by format name inherits properties from `Object.prototype`. When the `$data` option is enabled and a schema resolves the `format` keyword from

[Read the thread](https://github.com/kontent-ai/mcp-server/issues/146) · 2026-08-27 · open · external user · 0 comments

### Major upgrade for raw-body - mcp-server

Find more live information in Aikido here: https://app.aikido.dev/repositories/2034799?sidebarIssue=40432901&groupId=96652&sidebarIssueTask=6450730&sidebarTab=tasks


### Scope
These issues affect the following code repository:
- mcp-server: package-lock.json


### TLDR
`raw-body` accepts a `limit` option to cap how many bytes are read from a stream. When `limit` is set to an unparseable value such as an invalid size string or `NaN`, parsing yields no usable byte count and size enforcem

[Read the thread](https://github.com/kontent-ai/mcp-server/issues/144) · 2026-08-27 · closed · external user · 1 comment

### Binary, code or archive is pulled from a remote source without integrity verification - mcp-server

Find more live information in Aikido here: https://app.aikido.dev/repositories/2034799?sidebarIssue=29198612&groupId=96652&sidebarIssueTask=6450728&sidebarTab=tasks


### Scope
These issues affect the following code repository:
- mcp-server: [.github/workflows/release.yml at line 36](https://github.com/kontent-ai/mcp-server/blob/master/.github/workflows/release.yml#L36)


### TLDR
A GitHub Actions Workflow was built using an artifact from a remote source without any integrity verificati

[Read the thread](https://github.com/kontent-ai/mcp-server/issues/142) · 2026-08-27 · open · external user · 0 comments

### Express is not emitting security headers - mcp-server

Find more live information in Aikido here: https://app.aikido.dev/repositories/2034799?sidebarIssue=29198168&groupId=96652&sidebarIssueTask=6450722&sidebarTab=tasks


### Scope
These issues affect the following code repository:
- mcp-server: [src/bin.ts at line 19](https://github.com/kontent-ai/mcp-server/blob/master/src/bin.ts#L19)


### TLDR
You're using an Express server, but not using Helmet. Helmet can help protect your app from some well-known web vulnerabilities by setting HTTP h

[Read the thread](https://github.com/kontent-ai/mcp-server/issues/140) · 2026-08-27 · open · external user · 0 comments

### mcp-server is indexed on our MCP marketplace

Hey -- found mcp-server while indexing servers for https://getlulu.dev/mcps. Connect to Kontent.ai to manage content, types, taxonomies, and workflows via natural language.

You're indexed and ranked well already:

[![MCP Marketplace](https://img.shields.io/badge/MCP%20Marketplace-Indexed-blueviolet)](https://getlulu.dev/mcps)

Feel free to drop that badge in your README -- helps agents discover it. If monetizing usage via SDK is ever interesting, it's a small opt-in addition -- otherwise just a

[Read the thread](https://github.com/kontent-ai/mcp-server/issues/130) · 2026-08-10 · open · external user · 0 comments

### update-content-item-variant does not support writing notes

### Motivation

Customers need to associate agent summaries or findings to content item variants in the system.
Examples:
- If elements are skipped in an Expert Agent review, editors want to see why. 
- Customers want to have Expert Agents that make suggestions without editing the content. They can currently only see those recommendations in the Expert Agent configuration, which is largely unavailable to non-Porject Managers.

### Proposed solution

Add support for the "note" attribute to the up

[Read the thread](https://github.com/kontent-ai/mcp-server/issues/110) · 2026-06-10 · closed · external user · 1 comment

### Rich text components with non-string element values fail validation

### Brief bug description

> **Note:** This issue was AI-generated using Claude Code based on debugging session findings.

The `upsert-language-variant-mapi` tool fails when adding rich text components that contain elements with non-string values (e.g., multiple_choice, number, linked_items). The API returns:

```
Invalid rich text value. The component OBJECT has a data-id not matching any component in the components array.
```

The Management API works correctly when called directly via curl — 

[Read the thread](https://github.com/kontent-ai/mcp-server/issues/68) · 2026-01-13 · closed · outside contributor · 1 comment

### Cannot connect to mcp-use - Error running query: 'condition'

### Brief bug description

MCP Kontent.ai initialization error: Server returns 'condition' error when trying to create MCP sessions in the Kontent.ai integration. This error happens when trying to follow the tutorial on https://github.com/mcptutorial/mcp-use/blob/main/examples/chat_example.py and adding the MCP of Kontent.ai

In Cursor IDE the MCP works perfectly, but when trying to integrating with mcp-use gives gives an error "Error running query: 'condition'".

### Repro steps

1. Follow step

[Read the thread](https://github.com/kontent-ai/mcp-server/issues/28) · 2025-08-19 · closed · external user · 2 comments

## Most recent

The remaining reports are on [the project's issue tracker](https://github.com/kontent-ai/mcp-server/issues).
