{"repo":"NousResearch/hermes-agent","public_id":"97460","display_label":"Redact Bearer credentials in MCP diagnostics output","summary":"Multiple fixes and a related security report addressing Bearer token fragments being exposed in MCP test output, probe errors, and dashboard diagnostics. The work focuses on ensuring credential headers are fully redacted in these contexts.","subsystem":null,"counts":{"members":5,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":3},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":108695,"merged_at":"2026-09-13T03:49:18+00:00"},"resolution":{"state":"resolved","by":"pr-108695"},"freshness":{"state":"verified","last_verified_at":"2026-09-13T03:49:18+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.4},"fix_edges":[{"issue_number":97460,"pr_number":108695,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-13T03:49:18+00:00"}],"members":[{"kind":"issue","number":97460,"title":"security: MCP test and dashboard errors can expose Bearer fragments","url":null,"state":"closed"},{"kind":"pr","number":97466,"title":"fix(mcp): fully redact Bearer values in mcp test output","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#108695","number":108695}],"category":"merged_via","implication":"superseded"},"merged":false},{"kind":"pr","number":97470,"title":"fix(mcp): redact Bearer fragments from mcp test output and probe errors","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#97466","number":97466}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":97541,"title":"fix(mcp): fully redact bearer credentials in diagnostics","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#97466","number":97466},{"kind":"pr","value":"#97460","number":97460}],"category":"duplicate_of","implication":"duplicate"},"merged":false},{"kind":"pr","number":108695,"title":"fix(mcp): fully redact credential headers in MCP probe errors and test display (salvage #97466)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["hermes_cli/mcp_config.py","hermes_cli/web_routers/mcp.py","tests/hermes_cli/test_mcp_probe_redaction.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}