# Reported issues for Skyvern Pod holds 18 of 18 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user. Back to [Skyvern](/mcp/skyvern). ## Most discussed ### OpenCode - Authentication error - OAuth I'm using OpenCode CLI to install Skyvern MCP as remote. While trying to install Skyvern MCP server into OpenCode for browser automation I'm getting authentication error, --- opencode mcp auth Skyvern ┌ MCP OAuth Authentication │ ■ Authentication failed │ ■ OAuth callback timeout - authorization took too long │ └ Done --- [Read the thread](https://github.com/Skyvern-AI/skyvern/issues/6044) · 2026-05-18 · closed · external user · 3 comments ### ERROR: Skyvern Frontend directory not found. I keep on getting `ERROR: Skyvern Frontend directory not found.`. I'm on:

and skyvern version:

But still getting:

skyvern run workflow subcommand missing

Summary

Currently there is no CLI sub‑command for executing workflows programmatically. Attempting to run skyvern run workflow … exits with Error: No such command 'workflow'. Adding this command would bring feature parity with the Web UI and REST API and allow automation or CI pipelines to trigger workflo [Read the thread](https://github.com/Skyvern-AI/skyvern/issues/2220) · 2025-04-22 · closed · external user · 4 comments ### Media URLs seem incorrect when not local I noticed in console two problems: 1. The service was trying to contact localhost:9090 for media (page snapshots, e.g.). 2. The service was trying to use file:// for videos I was able to work around #1 by specifying `VITE_ARTIFACT_API_BASE_URL=http://remotehost:9090` (very sensitive to trailing slash). It would probably be good to include an example in the docker compose file. But for 2, I don't have a workaround. It seems to just always want to serve that from a place that won't exist on m [Read the thread](https://github.com/Skyvern-AI/skyvern/issues/1653) · 2025-01-27 · closed · external user · 10 comments ### Support for Loading Extensions with Playwright Browser Context It would be highly beneficial to have a feature that allows loading browser extensions when using Playwright. The functionality could involve specifying a list of extension folder names through an environment variable. These extensions would then automatically load whenever a Playwright browser context is created. This feature would greatly enhance workflows that rely on custom browser extensions, enabling better testing and automation scenarios. [Read the thread](https://github.com/Skyvern-AI/skyvern/issues/1648) · 2025-01-26 · closed · outside contributor · 4 comments ### Self-hosted proxy pool It would be great if we could specify a proxy pool to use in chrome. either through a comma-separated list of proxy configs passed through an ENV, or some other config value. [Read the thread](https://github.com/Skyvern-AI/skyvern/issues/1645) · 2025-01-25 · closed · external user · 6 comments ### Add tutorial for utilizing skyvern for automated UI testing I'm not sure if this is an intended use case, but this looks like something that could seriously help tremendously with automated UI testing. Would you be able to add something to the ReadMe that explains how one might integrate this into a CI/CD pipeline for that purpose? [Read the thread](https://github.com/Skyvern-AI/skyvern/issues/105) · 2024-03-18 · open · external user · 12 comments ## Most recent ### MCP OAuth: authorization server issuer doesn't match its discovery URL, so SDK clients refuse to authorize An external MCP-auth conformance scan of the Skyvern MCP endpoint turns up one requirement violation that stops spec-following OAuth clients from authorizing. ## What happens `https://api.skyvern.com/mcp/` returns a 401 whose `WWW-Authenticate` points at the protected-resource metadata: ``` resource_metadata="https://api.skyvern.com/.well-known/oauth-protected-resource/mcp" ``` That document lists the authorization server as: ```json "authorization_servers": ["https://api.skyvern.com"] ``` [Read the thread](https://github.com/Skyvern-AI/skyvern/issues/8263) · 2026-08-22 · open · external user · 1 comment ### Follow-up: opt-in gateway allowlist to restore Docker self-heal Repair under loopback-only internal_auth Follow-up to Skyvern-AI/skyvern#6890 / PR Skyvern-AI/skyvern#7176. ## Context Skyvern-AI/skyvern#7176 fixes a trust-boundary bypass by restricting the `internal/auth` routes to **loopback-only** (`127.0.0.1` / `::1`), dropping the previous `is_private` (all-RFC1918) trust. That is the deliberate, correct security default. **Known intentional tradeoff:** the local-dev self-heal "Repair" button (`SelfHealApiKeyBanner.tsx` → `POST /api/v1/internal/auth/repair`) used **against a Dockerized backen [Read the thread](https://github.com/Skyvern-AI/skyvern/issues/7177) · 2026-07-07 · open · outside contributor · 0 comments ### SSRF Protection Bypass via IPv6 Bracket Parsing Gap ## 1. Executive Summary Skyvern's SSRF protection function `is_blocked_host()` uses `ipaddress.ip_address(host)` to detect private/loopback IP addresses. However, when a URL contains an IPv6 address (e.g., `https://[::1]/`), the `host` value parsed by Pydantic's `HttpUrl` retains the RFC 3986 brackets (`[::1]`). Python's `ipaddress.ip_address()` does not accept bracketed IPv6 addresses, raising `ValueError`. The code catches this exception and falls through to a simple string comparison against [Read the thread](https://github.com/Skyvern-AI/skyvern/issues/5920) · 2026-05-09 · closed · external user · 0 comments ### feat: Support per-run LLM API key override (BYOK) for tasks and workflows ## Current behavior All LLM calls in Skyvern use a single server-configured API key (`LLM_KEY` env var). There is no way for a caller to supply their own LLM API key on a per-run basis. ## Expected behavior Callers should be able to pass an optional `llm_api_key` in the request body for `POST /run/tasks`, `POST /run/workflows`, and the legacy `POST /api/v1/tasks` endpoint. Skyvern should use that key for every LLM call within that specific run. ## Why this is useful - **Multi-tenant / BYOK dep [Read the thread](https://github.com/Skyvern-AI/skyvern/issues/5898) · 2026-05-08 · closed · external user · 1 comment ### Session Persistence Bridge # Session Persistence Bridge ## Objective Implement a session persistence bridge that maintains browser state and session data across OctoBrowser profile transitions and Skyvern agent handoffs, enabling seamless workflow continuity. ## Background Skyvern workflows often require maintaining session state across multiple steps or agent transitions. OctoBrowser profiles provide persistent browser environments, but we need a bridge system to coordinate session data between the two systems. ## Req [Read the thread](https://github.com/Skyvern-AI/skyvern/issues/3254) · 2025-08-21 · closed · external user · 1 comment ### Epic: octobrowser-skyvern-integration # Epic: OctoBrowser-Skyvern Integration ## Overview Technical implementation to enable Skyvern automation agents to execute within OctoBrowser's managed Chromium profiles (Octium), leveraging existing profile persistence, CDP/VNC debugging capabilities, and MCP server infrastructure. The integration will create an adapter layer between Skyvern's BrowserFactory and OctoBrowser's ProfileManager without modifying core components, maintaining full backward compatibility while enabling advanced mul [Read the thread](https://github.com/Skyvern-AI/skyvern/issues/3248) · 2025-08-21 · closed · external user · 1 comment ### Cannot run MCP Server with Claude When I run the MCP server manually I see `b@bdm1 ~ % python -m skyvern run mcp ╭────────────────────────────────────────────────────────────────────╮ │ Starting MCP Server... │ ╰────────────────────────────────────────────────────────────────────╯` And Claude desktop does not like the output: I am running Skyvern itself in docker. [Read the thread](https://github.com/Skyvern-AI/skyvern/issues/2784) · 2025-06-24 · closed · external user · 0 comments ### ERROR : connection failed: fe_sendauth: no password supplied I am having a problem during the installation. I could not find any documentation on how to fix the problem. Can you help? `PS C:\Users\fetullah.turkeli\skyvern> docker -v Docker version 28.1.1, build 4eba377 PS C:\Users\fetullah.turkeli\skyvern> docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 5edd688364d0 postgres:14 "docker-entrypoint.s…" 13 minutes ago Up 13 minutes 0.0.0.0:5432->5432/tcp postgresql-c [Read the thread](https://github.com/Skyvern-AI/skyvern/issues/2753) · 2025-06-19 · closed · external user · 1 comment ### [Feature Request] Add Infisical Support Hello, Same as Bitwarden support, could you add infisical support ? Thanks. [Read the thread](https://github.com/Skyvern-AI/skyvern/issues/2665) · 2025-06-10 · closed · external user · 2 comments ### Interrupt process to append extra data I kicked off a prompt from the homepage, just a simple query (check if I have unclaimed money). Skyvern started navigating to a page and started to search for me. But I didn't give it any of my information, and it started looping: ![Image](https://github.com/user-attachments/assets/9d4a705c-6380-46d2-8bd4-18ea59a6e939) - Is it possible to have a semi-iterative approach, where it tries to refine the process, or ask me to supply extra information, before it does this? [Read the thread](https://github.com/Skyvern-AI/skyvern/issues/2429) · 2025-05-22 · closed · external user · 1 comment The remaining reports are on [the project's issue tracker](https://github.com/Skyvern-AI/skyvern/issues).