stacklok / toolhive
73%

DEFAULT BRANCH: main
Repo Added
Files 1004
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH main
branch: main
CHANGE BRANCH
x

coverage: 72.776% (-0.01%) from 72.786%
Relevant lines Covered
128938 RELEVANT LINES 93836 COVERED LINES
850.69 HITS PER LINE
Source Files on main

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
42278089269 main Name the ID-JAG JWT type once (#7070) The ID-JAG typ value was spelled as a string literal in several places, and the vMCP XAA strategy kept its own private copy. A later change checks this value at access-token and subject-token validators, so i... push web-flow github
72.78
42219247419 main Release v0.63.0 (#7067) Update release files Release-Triggered-By: rdimitrov Co-authored-by: toolhive-release-app[bot] <280093410+toolhive-release-app[bot]@users.noreply.github.com> push web-flow github
72.79
42203123624 main Move upstream filter contracts out of handlers (#7059) Let embedders configure upstream filters without importing HTTP handlers. Retain handler aliases and existing authorization behavior, and cover the public and compatibility paths. Co-authore... push web-flow github
72.73
42060020665 main Return invalid_target when token exchange refuses an audience (#7050) * Return invalid_target when token exchange refuses an audience RFC 8693 section 2.2.2 says invalid_target SHOULD be returned when the authorization server refuses a requested... push web-flow github
72.77
42022014713 main fix: address open code scanning alerts (#7056) * Fix integer conversion and bump x/net in sdk/go Replace the helper-based port range check with a combined bounds check and int32 conversion so the conversion is provably safe, and drop the now-unn... push web-flow github
72.71
42001429620 main Leave user-owned Bedrock keys alone in llm setup (#7051) * Leave user-owned Bedrock keys alone in llm setup A setup without --bedrock-compat, and teardown, removed Claude Code's and Codex's Bedrock keys even when ToolHive never wrote them, so a ... push web-flow github
72.75
41912518784 main Merge commit from fork * Fail closed on content-encoded list responses The transparent proxy forwarded the client's Accept-Encoding to the backend, which stops Go's transport from decoding the response. A compressing backend then handed the auth... push web-flow github
72.74
41910049034 main Merge commit from fork * Move JSON object member helpers to pkg/mcp The object member decoder and the canonical member check that the authz list filters use to reject duplicate and case-folded members move from pkg/authz to pkg/mcp and are expor... push web-flow github
72.67
41839971734 main Release v0.62.0 (#7054) * Update release files Release-Triggered-By: rdimitrov * Ignore caf in codespell Percent-encoded test URIs and authz docs contain caf%C3%A9 (café), which codespell flags as a misspelling of calf. Co-Authored-By: Claude... push web-flow github
72.61
41837654690 main Align vMCP with the final MCP 2026-07-28 spec (#7032) * Return spec-required Modern HTTP statuses Co-authored-by: Mecatl <noreply@mecatl.dev> * Update vMCP architecture documentation Co-authored-by: Mecatl <noreply@mecatl.dev> * Refresh MCP 2... push web-flow github
72.56
See All Builds (13743)