Nothing open on GitHub. Fix merged in #111478 on 15 Sep 2026. Check it covers your case.
The short answer
- Known?
- Yes. 3 related items grouped here, 1 issue already closed.
- Fix event
- A fix was merged to main in PR #111478. Check it covers your case. No release data is tracked.
- Tracker
- The maintainers' tracker marks this
resolved, deciding PR #111478. That is separate from the fix event. - Still open
- Nothing open on GitHub.
These items address a bug where expired OAuth tokens loaded during a cold start are not refreshed, specifically due to expires_in being clamped to zero and token validity being checked within the same clock tick. The cluster covers the bug report and related fix attempts.
Open issues0
Open PRs0
Fixes on record
-
#111478 fix(mcp): expired OAuth token is refreshed on cold start, not sent in the same clock tick (#111009, salvage #111015)
files:
tests/tools/test_mcp_oauth_cold_load_expiry.py,tools/mcp_oauth_manager.py
1 PR closed without merging
From the close comments: done elsewhere 1
-
#111015 fix(mcp): refresh expired cold-loaded OAuth tokens · done elsewhere →
#111478
Closed issues · 1
- Closed#111009[Bug]: MCP OAuth never refreshes an expired token on a cold start (Windows) — expires_in clamped to 0 + same-tick is_token_valid()
How this cluster was grouped
-
Link evidence (
structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference. -
Pairwise link density
0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36.1.00means every pair is linked.
Pick up a Lab task
Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.
Open the LabAt a glance
- Merged PRs
- #111478
- Closed issues
- 1
- Attempts
- 1 PR closed without merging
- Fix link checked
- 15 Sep 2026