{"repo":"NousResearch/hermes-agent","public_id":"122665","display_label":"MCP cross-profile connection identity adoption bug","summary":"A bug where multiplexed profiles incorrectly adopt MCP connections opened under a different profile's identity or secret-source environment. The fixes enforce that a profile only adopts a shared connection when the computed identity matches its own.","subsystem":null,"counts":{"members":4,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":2},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":124119,"merged_at":"2026-09-26T17:10:55+00:00"},"resolution":{"state":"resolved","by":"pr-124119"},"freshness":{"state":"verified","last_verified_at":"2026-09-26T17:10:55+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":122665,"pr_number":124119,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-26T17:10:55+00:00"}],"members":[{"kind":"issue","number":122665,"title":"[Bug]: multiplexed profiles adopt another profile's MCP connection opened with that profile's secret-source env / identity header","url":null,"state":"closed"},{"kind":"pr","number":122666,"title":"fix(mcp): a profile only adopts a shared connection whose resolved identity matches its own","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"684f7e99274714c4cb27c55d7ccc83af8166a731","number":0},{"kind":"pr","value":"#124119","number":124119}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":123233,"title":"fix(mcp): compare effective connection inputs before cross-profile adoption","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"684f7e99274714c4cb27c55d7ccc83af8166a731","number":0},{"kind":"pr","value":"#124119","number":124119}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":124119,"title":"fix(mcp): a profile only adopts a shared connection whose resolved identity matches its own","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["tests/gateway/test_multiplex_mcp_discovery.py","tests/tools/test_mcp_multiplex_connection_keys.py","tests/tools/test_mcp_shared_connection_resolved_identity.py","tools/mcp_tool.py","tools/mcp_tool_registration.py","tools/mcp_tool_server_run.py","tools/mcp_tool_transport.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}