-
Notifications
You must be signed in to change notification settings - Fork 1.3k
Pull requests: modelcontextprotocol/inspector
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Security: Potential reverse tabnabbing via
window.open with _blank
#1190
opened Apr 11, 2026 by
tuanaiseo
Loading…
3 tasks
Security: OAuth callback does not validate
state parameter
#1189
opened Apr 11, 2026 by
tuanaiseo
Loading…
3 tasks
chore(deps): bump the npm_and_yarn group across 1 directory with 6 updates
dependencies
Pull requests that update a dependency file
javascript
Pull requests that update javascript code
#1188
opened Apr 11, 2026 by
dependabot
bot
Loading…
fix(server): sanitize error responses to prevent stack trace exposure
#1187
opened Apr 11, 2026 by
cliffhall
Member
Loading…
2 of 4 tasks
feat: handle tools/resources/prompts list_changed notifications
#1181
opened Apr 8, 2026 by
travisbreaks
Loading…
3 of 5 tasks
fix: handle null body status in createCustomFetch proxy
#1180
opened Apr 6, 2026 by
evan-choi
Loading…
4 tasks done
feat: show item count in list pane header
#1178
opened Apr 6, 2026 by
Christian-Sidak
Loading…
3 tasks done
fix: call tasks/result when task status is input_required
#1174
opened Apr 3, 2026 by
galagaevdc
Loading…
12 of 17 tasks
feat: add OAuth 2.0 client certificate authentication (private_key_jwt)
#1169
opened Apr 1, 2026 by
harishkaushal30
Loading…
fix: preserve trailing decimal zeros in number inputs (e.g. 1.0)
#1164
opened Mar 29, 2026 by
majiayu000
Loading…
9 of 17 tasks
fix: preserve quoted args with spaces when launching via CLI
#1162
opened Mar 27, 2026 by
petereon
Loading…
7 of 17 tasks
fix: reject requests with missing Origin header in origin validation middleware (CWE-346)
#1161
opened Mar 27, 2026 by
sebastiondev
Loading…
feat: use json editor instead of <string,string> pairs in metadata tab
#1159
opened Mar 19, 2026 by
Izelude
Loading…
7 tasks done
Logging updates (including reported SonicBoom error)
v1.5
Issues and PRs for v1.5
#1158
opened Mar 18, 2026 by
BobDickinson
Contributor
Loading…
7 tasks done
fix: remove Content-Type header from OAuth metadata discovery GET requests
#1157
opened Mar 18, 2026 by
MumuTW
Contributor
Loading…
fix: suppress RFC 8707
resource parameter in OAuth authorization requests
#1154
opened Mar 17, 2026 by
DSavaliya-gh
Loading…
Zustand store spike
v1.5
Issues and PRs for v1.5
#1145
opened Mar 15, 2026 by
BobDickinson
Contributor
•
Draft
Add missing runtime dependencies for strict package managers
#1144
opened Mar 13, 2026 by
herakles-dev
Loading…
4 of 6 tasks
Fix task polling blocking the Run button
#1134
opened Mar 9, 2026 by
herakles-dev
Loading…
5 of 12 tasks
Fix OAuth: use authorization_servers URL from resource metadata for scope discovery
#1133
opened Mar 8, 2026 by
Copilot
AI
Loading…
6 of 17 tasks
feat: handle tools/resources/prompts list_changed notifications
#1132
opened Mar 7, 2026 by
herakles-dev
Loading…
7 of 17 tasks
fix: clear cached DCR client on Guided OAuth Flow and add clear dialog
#1123
opened Feb 27, 2026 by
peschee
Loading…
3 of 5 tasks
fix: prevent dual Content-Type header in OAuth token requests
#1122
opened Feb 27, 2026 by
peschee
Loading…
2 of 3 tasks
Previous Next
ProTip!
What’s not been updated in a month: updated:<2026-03-11.