Search results

Hide Prometheus UI route while keeping metrics backend

Status: Open.

#228 In Agent-Hellboy/mcp-runtime;

· Agent-Hellboy opened on May 21, 2026

Harden tenant/admin boundaries across platform API surfaces

Status: Open.

#227 In Agent-Hellboy/mcp-runtime;

· Agent-Hellboy opened on May 21, 2026

Clarify --use-kube as admin and dev/test-only flow

Status: Open.

#226 In Agent-Hellboy/mcp-runtime;

· Agent-Hellboy opened on May 21, 2026

Track AI assist gotchas

Status: Open.

#216 In Agent-Hellboy/mcp-runtime;

· Agent-Hellboy opened on May 20, 2026

Add scoped Grafana and Prometheus access for deployed MCP servers

Status: Open.

#181 In Agent-Hellboy/mcp-runtime;

· Agent-Hellboy opened on May 13, 2026

Review follow-up: shutdown data loss, silent audit drops, and unbounded login-attempt state

bugSomething isn't workingSomething isn't working

Status: Open.

#146 In Agent-Hellboy/mcp-runtime;

· Agent-Hellboy opened on May 6, 2026

Security: in-cluster communication audit findings (alpha hardening)

securitySecurity vulnerabilities, hardening, threat-model concernsSecurity vulnerabilities, hardening, threat-model concerns

Status: Open.

#110 In Agent-Hellboy/mcp-runtime;

· Agent-Hellboy opened on Apr 30, 2026

Security audit: platform.mcpruntime.org exposure (Prometheus public, unauth MCP tool exec, missing headers, HTTP served)

securitySecurity vulnerabilities, hardening, threat-model concernsSecurity vulnerabilities, hardening, threat-model concerns

Status: Open.

#108 In Agent-Hellboy/mcp-runtime;

· Agent-Hellboy opened on Apr 30, 2026

Internal/Origin IP Address Exposure in API Response

day2-infra-hardeningOperational hardening after install: NetworkPolicy, RBAC tightening, mTLS, etc.Operational hardening after install: NetworkPolicy, RBAC tightening, mTLS, etc.

platformCross-cutting platform concerns spanning multiple componentsCross-cutting platform concerns spanning multiple components

Status: Open.

#107 In Agent-Hellboy/mcp-runtime;

· ankitkatewa opened on Apr 30, 2026

Add continuous cluster watcher for runtime health incidents

Status: Open.

#106 In Agent-Hellboy/mcp-runtime;

· Agent-Hellboy opened on Apr 30, 2026

feat(auth): make platform login pluggable and add LDAP backend

auth(n/z)DEPRECATED — use 'auth'. Kept temporarily for back-compat.DEPRECATED — use 'auth'. Kept temporarily for back-compat.

Status: Open.

#104 In Agent-Hellboy/mcp-runtime;

· Agent-Hellboy opened on Apr 30, 2026

Ticket to track AI slops

ai-slopIssues caused by AI-generated code quality regressionsIssues caused by AI-generated code quality regressions

Status: Open.

#103 In Agent-Hellboy/mcp-runtime;

· Agent-Hellboy opened on Apr 29, 2026