Search results

/api/scaffold REST endpoint bypasses rate-limit and quota entirely

severity:mediumMedium severity — real but contained impactMedium severity — real but contained impact

Status: Open.

#45 In Stackbilt-dev/stackbilt-mcp-gateway;

· stackbilt-admin opened on Apr 18, 2026

Stale serverInfo.quotaHints credit range — says "1-20 credits", actual is 5-40

Status: Open.

#44 In Stackbilt-dev/stackbilt-mcp-gateway;

· stackbilt-admin opened on Apr 18, 2026

Audit outcome tier_denied overloaded for both tier restriction and quota exhaustion

Status: Open.

#43 In Stackbilt-dev/stackbilt-mcp-gateway;

· stackbilt-admin opened on Apr 18, 2026

Decide: sunset flow_* MCP ops or keep them alongside scaffold_*

Status: Open.

#38 In Stackbilt-dev/stackbilt-mcp-gateway;

· stackbilt-admin opened on Apr 17, 2026

OAuth grant props omit tenantId/tier, forcing re-resolution on every session init

severity:mediumMedium severity — real but contained impactMedium severity — real but contained impact

Status: Open.

#34 In Stackbilt-dev/stackbilt-mcp-gateway;

· stackbilt-admin opened on Apr 16, 2026

feat: agent memory tools — inscribe, recall, entropy query via MCP

Status: Open.

#25 In Stackbilt-dev/stackbilt-mcp-gateway;

· stackbilt-admin opened on Apr 4, 2026

feat: agent tool aliasing — expose /agents/run and /agents/bootstrap as MCP tools

Status: Open.

#24 In Stackbilt-dev/stackbilt-mcp-gateway;

· stackbilt-admin opened on Apr 4, 2026

stackbilder.stackbilt.dev — standalone interactive gallery experience

Status: Open.

#20 In Stackbilt-dev/stackbilt-mcp-gateway;

· stackbilt-admin opened on Mar 27, 2026

feat: MPP machine payments — agent-native pay-per-tool-call

enhancementNew feature or requestNew feature or request

Status: Open.

#16 In Stackbilt-dev/stackbilt-mcp-gateway;

· stackbilt-admin opened on Mar 22, 2026