{"repo":"NousResearch/hermes-agent","public_id":"128199","display_label":"Device OAuth flow missing offline_access scope","summary":"These items concern the device OAuth flow not requesting the offline_access scope, causing repeated re-authentication prompts on servers that require it for refresh tokens. A fix is proposed to request offline_access when the server advertises support for it.","subsystem":"mcp","counts":{"members":3,"open_issues":1,"open_issues_distinct":1,"open_prs":2,"closed_issues":0,"merged_prs":0,"attempt_prs":2},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":1.0},"fix_edges":[],"members":[{"kind":"issue","number":128199,"title":"Device OAuth flow never requests offline_access, so refresh-token-gated servers re-prompt every token lifetime","url":null,"state":"open"},{"kind":"pr","number":128201,"title":"fix(mcp): request offline_access in the device OAuth flow when the server advertises it","url":null,"state":"open","close_reason":{"refs":[{"kind":"pr","value":"#133651","number":133651},{"kind":"pr","value":"#133651","number":133651}],"category":"merged_via","implication":"superseded"},"merged":false},{"kind":"pr","number":133651,"title":"fix(mcp): device-flow login keeps a refresh token on offline_access servers (#128199, salvage #128201)","url":null,"state":"open","close_reason":{"refs":[{"kind":"commit","value":"dbb70b9f2380652d471e89b9f055450173c93eaf","number":0}],"category":"uncategorized","implication":"needs_llm"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}