Issues - gitea-mcp - Gitea: Git with a cup of tea

mathias/gitea-mcp

Labels Milestones New Issue

chore(context): restore the root rules in AGENTS.md and system-prompt.txt (project-only since 10-08) risk/low type/chore

by mathias was closed 2026-10-09 06:02:43 +00:00

pr_merge sends merge_message_title, but Gitea's field is merge_title_field: a custom merge title is silently ignored risk/low size/xs type/fix

by mathias was closed 2026-10-10 08:50:06 +00:00

pr_merge is an independent merge path with no risk-tier gate (follow-up to #63)

by mathias was closed 2026-10-08 06:23:19 +00:00

CI never runs on pull requests — the risk/medium+ PR lane merges with no CI evidence

by mathias was closed 2026-10-05 07:25:38 +00:00

Tool args: case-variant duplicate keys silently override, and file_write_branch accepts refs/heads/* (wedges main) risk/medium size/s type/fix

by mathias was closed 2026-10-05 05:10:51 +00:00

tools/call is not audit-logged — only auth acceptance is (OWASP MCP08) risk/low size/s type/feat

by mathias was closed 2026-10-01 18:35:01 +00:00

tbd_ship: gate auto-merge on the risk tier, and refuse when unclassified risk/medium size/s type/feat

by mathias was closed 2026-10-08 06:05:48 +00:00

Auth path is silent on success — can't tell PAT pass-through from JWT fallback in logs risk/high size/s type/feat

by mathias was closed 2026-09-14 18:59:06 +00:00

Per-caller Gitea PAT pass-through (replaces shared default token for real users)

by mathias was closed 2026-07-22 06:32:00 +00:00

Misleading auth log: static_token_mismatch reported for token_type: "jwt" when the JWT validator is unavailable risk/medium size/s type/fix

by mathias was closed 2026-09-14 18:59:06 +00:00

JWT validator init is one-shot at startup — IdP unavailable during co-boot degrades auth permanently and silently risk/high size/m type/fix

by mathias was closed 2026-09-14 18:06:19 +00:00

code_search called a REST endpoint that doesn't exist — every call 404'd

by mathias was closed 2026-07-07 09:31:46 +00:00

create_project_from_template: optionally auto-register a new repo into dispatch's git-tracked allowlist

by mathias was closed 2026-07-06 22:36:44 +00:00

0 / 4

create_project resume: rename path can get stuck if a prior write+delete partially completed

by mathias was closed 2026-07-04 12:10:07 +00:00

0 / 2

feat: label tools (label_list + issue_label by name) — unblock applying status:dispatch from the MCP

by mathias was closed 2026-07-04 11:44:37 +00:00

dispatch_allow silently fails under infra#179 — make dispatch-eligibility verified, not best-effort

by mathias was closed 2026-07-04 11:58:19 +00:00

create_project_from_template: substitution not durable against infra#179 (silent 0-file partial_failure)

by mathias was closed 2026-07-04 11:58:18 +00:00

repo_mirror_push: remote_password (a secret) is passed as a plain tool arg → lands in transcripts

by mathias was closed 2026-07-04 07:00:30 +00:00

0 / 2

tbd_ship: idempotent re-invoke (resume an existing branch/PR) instead of colliding

by mathias was closed 2026-07-04 06:30:55 +00:00

0 / 3

Inject real build version via ldflags (main.version currently defaults to "dev")

by mathias was closed 2026-07-04 06:30:54 +00:00

0 / 3

1 2 3