{"repo":"NousResearch/hermes-agent","public_id":"111151","display_label":"MCP credential isolation bug across dashboard profiles","summary":"A bug where dashboard-served profile sessions incorrectly used another profile's MCP credentials due to improper connection scoping. These items address isolating MCP secrets, connections, and credentials per profile in dashboard contexts.","subsystem":null,"counts":{"members":4,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":2},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":111481,"merged_at":"2026-09-15T11:56:41+00:00"},"resolution":{"state":"resolved","by":"pr-111481"},"freshness":{"state":"verified","last_verified_at":"2026-09-15T11:56:41+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[{"issue_number":67605,"pr_number":111481,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-09-15T11:56:41+00:00"},{"issue_number":111151,"pr_number":111481,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-15T11:56:41+00:00"}],"members":[{"kind":"issue","number":111151,"title":"[Bug]: Dashboard-served profile sessions call MCP servers with another profile's credentials (multiplex scope never active on hermes_cli surfaces)","url":null,"state":"closed"},{"kind":"pr","number":111158,"title":"fix(dashboard): scope MCP secrets per profile","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"57c4e1d963","number":0},{"kind":"pr","value":"#111481","number":111481},{"kind":"pr","value":"#111158","number":111158},{"kind":"pr","value":"#111151","number":111151}],"category":"uncategorized","implication":"needs_llm"},"merged":false},{"kind":"pr","number":111354,"title":"fix(mcp): isolate dashboard-served profile connections without global multiplex flag","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"57c4e1d963","number":0},{"kind":"commit","value":"5117e3b3a0","number":0},{"kind":"pr","value":"#111481","number":111481},{"kind":"pr","value":"#111151","number":111151}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":111481,"title":"fix(mcp): dashboard-served profiles keep their own MCP connections and credentials (#111151)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["agent/secret_scope.py","tests/tools/test_mcp_multiplex_connection_keys.py","tools/mcp_tool.py","tools/registry.py","website/docs/user-guide/multi-profile-gateways.md"]}],"trust":{"default_tier":"verified","includes_suggested":false}}