pod
Other formats agents might prefer:
markdownjsonllms.txt

Agent? You probably want markdown or json, or Pod over MCP.

Reported issues for roslyn-mcp

Pod holds 18 of 67 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user.

Back to roslyn-mcp.

Most discussed

[audit] symbol_search lacks pagination — broad queries overflow MCP response cap on large solutions

Finding

symbol_search has no pagination parameters (offset, limit, or cursor). Broad queries on large solutions produce 69K+ responses that exceed the MCP transport cap, making the tool unusable without kind-filter narrowing. Other tools in the same family (list_analyzers, test_discover) have pagination.

Repro

Call symbol_search with a broad query string (no kind filter) on a 36-project solution. Observe response body exceeds 69K characters.

Proposed fix

Add `offset

Read the thread · 2026-05-11 · closed · 3 comments

[audit] guided_extract_interface prompt payload exceeds MCP cap (~30+ KB)

  • id: itchatbot-guided-extract-interface-prompt-payload-cap
  • source-repo: itchatbot
  • severity: P1
  • area: prompts
  • server-version: 1.38.1
  • anchors:
    • src/RoslynMcp.Host.Stdio/Prompts/PromptMessageBuilder.cs

finding: get_prompt_text for guided_extract_interface overflows the MCP inline payload cap (~30+ KB observed) on workspaces with 9+ projects. This is the third prompt of three in the same payload-cap-overflow family — sister issues are [#755](https://github.com/darylmcd/Roslyn-

Read the thread · 2026-05-16 · closed · 1 comment

[audit] find_unused_symbols flags *ForTest test-bridge accessors as unused (convention-invoked exclusion gap)

  • id: tradewise-find-unused-symbols-test-bridge-suffix-exclusion-gap
  • source-repo: tradewise
  • severity: P3
  • area: tools
  • server-version: 1.38.1
  • anchors:
    • src/RoslynMcp.Roslyn/Services/DeadCodeService.cs

finding: find_unused_symbols(includePublic=false) flags Build*CommandTextForTest methods (test-bridge accessors used via InternalsVisibleTo/reflection from test assemblies) as unused with confidence=high. 20 such hits observed in the TradeWise consumer audit. The existing "c

Read the thread · 2026-05-16 · closed · 1 comment

[audit] get_prompt_text has side-effects — debug_test_failure runs dotnet test, security_review runs vuln scan

  • id: itchatbot-get-prompt-text-side-effects-in-rendering
  • source-repo: itchatbot
  • severity: P2
  • area: prompts
  • server-version: 1.38.1
  • anchors:
    • src/RoslynMcp.Host.Stdio/Tools/PromptShimTools.cs
    • src/RoslynMcp.Host.Stdio/Prompts/PromptMessageBuilder.cs

finding: get_prompt_text for at least two prompts actually invokes live tools during rendering rather than performing pure template substitution: debug_test_failure runs dotnet test (16.5s, 1126 test outcomes captured); `sec

Read the thread · 2026-05-16 · closed · 1 comment

[audit] get_di_registrations default response (showLifetimeOverrides=true) overflows MCP cap on 100+ registrations

  • id: itchatbot-get-di-registrations-default-response-exceeds-mcp-cap
  • source-repo: itchatbot
  • severity: P2
  • area: tools
  • server-version: 1.38.1
  • anchors:
    • src/RoslynMcp.Host.Stdio/Tools/AdvancedAnalysisTools.cs

finding: get_di_registrations with its default response shape (showLifetimeOverrides=true) produces an 86 KB body on a 141-registration DI graph, exceeding the MCP inline transport cap and triggering a write-to-disk envelope fallback that breaks default callers. Peer too

Read the thread · 2026-05-16 · closed · 1 comment

[audit] symbol_refactor_preview auto-applies composite edit to workspace without explicit _apply call

  • id: itchatbot-symbol-refactor-preview-auto-applies-without-explicit-apply-call
  • source-repo: itchatbot
  • severity: P2
  • area: tools
  • server-version: 1.38.1
  • anchors:
    • src/RoslynMcp.Host.Stdio/Tools/SymbolRefactorTools.cs
    • src/RoslynMcp.Roslyn/Services/SymbolRefactorService.cs

finding: symbol_refactor_preview auto-applied its composite operation to the workspace without the agent calling any *_apply tool. workspace_changes records the edit at seq 2+3 with `toolName=symbol_re

Read the thread · 2026-05-16 · closed · 1 comment

[audit] P3 polish list (firewallanalyzer 2026-05-16): cosmetic + docs UX findings

Bundled list of P3-class findings (cosmetic / UX-polish / docs gaps) from the 2026-05-16 mcp-server-surface-test run against darylmcd/DotNet-Firewall-Analyzer. Server v1.38.1+7b2c0b9, catalog 2026.04. Audit report: audit-reports/20260516T062913Z_firewallanalyzer_mcp-server-surface-test.md. Items prefixed with section number from the audit report.

13.19 find_duplicate_helpers framework-wrapper filter leak — ApiHostBuilder.ConfigureSerilog/Cors/PanosHttpClient flagged at high/medium

Read the thread · 2026-05-16 · closed · 1 comment

[audit] find_reflection_usages no pagination/summary/filter — 153 KB response overflows MCP cap on 256-site solution

  • id: tradewise-find-reflection-usages-153kb-response-overflows-mcp-cap
  • source-repo: tradewise
  • severity: P2
  • area: tools
  • server-version: 1.38.1+7b2c0b99c2194858a41bdaedd4b7f4538f0a0d71
  • anchors:
    • src/TradeWise.Infrastructure/Backtesting/BacktestEngine.cs:191

finding: find_reflection_usages has no pagination, summary, projectName-required, or kind-filter parameter path. On a modest 759-document .NET 10 solution with 256 reflection sites (TradeWise: 234 typeof + 8 GetMethods + 6

Read the thread · 2026-05-16 · closed · 1 comment

Most recent

Option C (Claude Code plugin) doesn't bundle the server binary, contradicting docs, and can't use Option B's dnx invocation

Description

README and docs/compatibility.md describe Option C (the Claude Code plugin) as if it's self-contained:

  • README: "The plugin bundles the MCP server, 32 skills, and safety hooks."
  • docs/compatibility.md install-path table: Option C cold-start cost is "Lowest (bundled)" and update story is "/plugin update".
  • docs/compatibility.md client table: "The Claude Code Plugin path ... is the highest-fidelity install — bundles the server, 32 skills, and safety hooks."

In

Read the thread · 2026-08-21 · closed · outside contributor · 0 comments

Infer workspaceId from filePath when the call already identifies exactly one loaded workspace

Signal

From the same 10,383-event MCP log survey (2026-04 → 2026-07): 23 of 69 structured tool errors — the single largest category — are workspace-disambiguation failures.

InvalidArgument | find_references | Parameter 'workspaceId' is invalid:
  workspaceId was omitted but 2 workspaces are loaded
  (8f6915d11da64f378bd17149cc69b751, 9c49cfa626844a6eaf0bcdec43af740d).
  Pass workspaceId explicitly to choose one.

Spread across find_references, compile_check, `document_symbol

Read the thread · 2026-07-31 · closed · 0 comments

Accept LSP-style 'character' as an alias for the 'column' source-location parameter

Signal

A survey of 10,383 MCP log events across 43 working directories (2026-04 → 2026-07) turned up 69 structured tool errors. The single largest shape — 13 occurrences, still recurring as of 2026-07-28 across two unrelated repos (TradeWise, SnipCue) — is:

InvalidArgument | find_references | Parameter '<unknown>' is invalid:
  Source location is incomplete. Provide all of filePath, line, and column. Missing: column.
  Note: this server uses parameter name 'column' (1-based), not th

[Read the thread](https://github.com/darylmcd/Roslyn-Backed-MCP/issues/1128) · 2026-07-31 · closed · 0 comments

### [audit] test_reference_map.limit caps coveredSymbols only; mockDriftWarnings + uncoveredSymbols unpaginated

- id: itchatbot-test-reference-map-pagination-only-covers-covered-symbols
- source-repo: itchatbot
- severity: P3
- area: tools
- server-version: 1.38.1
- anchors:
  - src/RoslynMcp.Host.Stdio/Tools/TestCoverageTools.cs

**finding**: `test_reference_map`'s `limit` parameter only caps the `coveredSymbols` collection. The other two enumerable response fields — `mockDriftWarnings` (109 entries observed) and `uncoveredSymbols` — are unpaginated, producing a 60 KB payload even when caller sets `limit

[Read the thread](https://github.com/darylmcd/Roslyn-Backed-MCP/issues/774) · 2026-05-16 · closed · 0 comments

### [audit] project_graph.outputType reports Library for ASP.NET Web/Worker SDK projects (should be Exe)

- id: tradewise-project-graph-output-type-misreports-sdk-defaulted-exe
- source-repo: tradewise
- severity: P3
- area: tools
- server-version: 1.38.1
- anchors:
  - src/RoslynMcp.Host.Stdio/Tools/WorkspaceTools.cs
  - src/RoslynMcp.Roslyn/Services/WorkspaceManager.cs

**finding**: `project_graph.outputType` returns `Library` for ASP.NET Core Web (`Microsoft.NET.Sdk.Web`) and Worker (`Microsoft.NET.Sdk.Worker`) projects that have no explicit `<OutputType>` element. These SDKs default `OutputType=

[Read the thread](https://github.com/darylmcd/Roslyn-Backed-MCP/issues/773) · 2026-05-16 · closed · 0 comments

### [audit] P2 polish list (firewallanalyzer 2026-05-16): tools/prompts/resources medium-severity findings

Bundled list of P2-class findings from the 2026-05-16 mcp-server-surface-test run against darylmcd/DotNet-Firewall-Analyzer. Server v1.38.1+7b2c0b9, catalog 2026.04. Audit report: `audit-reports/20260516T062913Z_firewallanalyzer_mcp-server-surface-test.md`. Each item below is a distinct finding and may be split into its own issue if a maintainer picks it up. Items prefixed with the section number from the audit report.

---

**13.3 Cross-tool blind spot on static extension-host classes** — `find

[Read the thread](https://github.com/darylmcd/Roslyn-Backed-MCP/issues/768) · 2026-05-16 · closed · 0 comments

### [audit] Preview tokens expire silently across workspace auto-reload; staleness contract undocumented

**id:** firewallanalyzer-preview-token-stale-across-auto-reload
**source-repo:** darylmcd/DotNet-Firewall-Analyzer (firewallanalyzer)
**severity:** P1
**area:** tools
**server-version:** 1.38.1+7b2c0b9
**audit-report:** audit-reports/20260516T062913Z_firewallanalyzer_mcp-server-surface-test.md

**Finding:** A preview token issued by `*_preview` (e.g. `scaffold_test_preview`) becomes stale after an intervening apply that triggers workspace auto-reload (visible as `_meta.staleAction=auto-reloaded`

[Read the thread](https://github.com/darylmcd/Roslyn-Backed-MCP/issues/767) · 2026-05-16 · closed · 0 comments

### [audit] split_service_with_di_preview emits non-functional code (fields not migrated; async+ValueTask compile error)

**id:** firewallanalyzer-split-service-with-di-broken-output
**source-repo:** darylmcd/DotNet-Firewall-Analyzer (firewallanalyzer)
**severity:** P1
**area:** tools
**server-version:** 1.38.1+7b2c0b9
**audit-report:** audit-reports/20260516T062913Z_firewallanalyzer_mcp-server-surface-test.md

**Finding:** For a service type whose state is a private readonly field (`Channel<JobRequest> _channel` in `JobQueue`), the preview emits partition types (`JobQueueEnqueue`, `JobQueueDequeue`) that reference

[Read the thread](https://github.com/darylmcd/Roslyn-Backed-MCP/issues/766) · 2026-05-16 · closed · 0 comments

### [audit] extract_interface_cross_project_preview generates uncompilable interface (missing usings, no ProjectReference)

**id:** firewallanalyzer-extract-interface-cross-project-uncompilable
**source-repo:** darylmcd/DotNet-Firewall-Analyzer (firewallanalyzer)
**severity:** P1
**area:** tools
**server-version:** 1.38.1+7b2c0b9
**audit-report:** audit-reports/20260516T062913Z_firewallanalyzer_mcp-server-surface-test.md

**Finding:** When the source type references same-project-only types in its method signatures (e.g. `ExecuteAsync` returning `ExecutiveRollup` with `AnalyzerId` and `AnalysisOptions` parameters), th

[Read the thread](https://github.com/darylmcd/Roslyn-Backed-MCP/issues/765) · 2026-05-16 · closed · 0 comments

### [audit] validate_workspace(runTests=true) reports overallStatus=clean while testRunResult.total=0 despite valid filter

**id:** firewallanalyzer-validate-workspace-runtests-total-zero
**source-repo:** darylmcd/DotNet-Firewall-Analyzer (firewallanalyzer)
**severity:** P1
**area:** tools
**server-version:** 1.38.1+7b2c0b9
**audit-report:** audit-reports/20260516T062913Z_firewallanalyzer_mcp-server-surface-test.md

**Finding:** `validate_workspace(changedFilePaths=[DriftDetector.cs], runTests=true)` returned `overallStatus=clean, testRunResult.total=0` despite the auto-derived filter containing 26 FQDNs. Running the

[Read the thread](https://github.com/darylmcd/Roslyn-Backed-MCP/issues/764) · 2026-05-16 · closed · 0 comments

The remaining reports are on [the project's issue tracker](https://github.com/darylmcd/Roslyn-Backed-MCP/issues).