Issues

• Two smaller HTTP findings: Host wildcard is a prefix test, and check_auth_status returns MONARCH_EMAIL

  robcerda/monarch-mcp-server#156 · Filter by author robcerda opened on Sep 18, 2026
  1

• HTTP transport allocates a session before the Host check, so rejected requests leak memory

  robcerda/monarch-mcp-server#153 · Filter by author robcerda opened on Sep 18, 2026

• Python 3.14 is unreachable: requires-python excludes it, and the upgrade that would enable it forces mcp 2.x (#84)

  robcerda/monarch-mcp-server#112 · Filter by author Soumava1 opened on Aug 31, 2026
  1

• Make dependency bumps reviewable: sdist diff artifact on bump PRs + PyPI-vs-tag verification

  robcerda/monarch-mcp-server#100 · Filter by author alex-zwingli opened on Aug 13, 2026
  1

• CI: supply-chain checks — network-egress canary job, pip-audit/OSV scanning, Dependency Review

  robcerda/monarch-mcp-server#99 · Filter by author alex-zwingli opened on Aug 13, 2026
  1

• Startup integrity self-check: verify installed critical packages against uv.lock hashes

  robcerda/monarch-mcp-server#97 · Filter by author alex-zwingli opened on Aug 13, 2026
  1

• Runtime egress allowlist via sys.addaudithook — fail loudly if anything dials out to a non-Monarch host

  robcerda/monarch-mcp-server#96 · Filter by author alex-zwingli opened on Aug 13, 2026
  1