Issues

• Substrate egress returns 403 and ingress 500 when the control plane is unreachable

  agentgateway/agentgateway#3752 · Filter by author QuentinBisson opened on Oct 2, 2026

• Rotated backendTLS files under a backend reference's policies are never reloaded

  agentgateway/agentgateway#3751 · Filter by author QuentinBisson opened on Oct 2, 2026

• llm: support parameterized path template for custom provider formats (incl. streaming/non-streaming)

  agentgateway/agentgateway#3749 · Filter by author zhonli opened on Oct 2, 2026

• MCP: upstream JSON-RPC error codes are all returned as -32603

  agentgateway/agentgateway#3748 · Filter by author anthonychung opened on Oct 2, 2026

• Anthropic Messages streaming: all-zero message_start usage can be materialized as final zero-token usage evidence (streaming + buffered cross-format)

  agentgateway/agentgateway#3739 · Filter by author danielzarioiu opened on Oct 1, 2026

• Feature request: Integrate NVIDIA Switchyard as another virtual-model mode

  agentgateway/agentgateway#3738 · Filter by author elliott-davis opened on Oct 1, 2026
  1

• Allow custom scope (ToolInput/ToolOutput) for remaining prompt guards

  LLM
  Feature

  agentgateway/agentgateway#3734 · Filter by author howardjohn opened on Oct 1, 2026

• cel conditions for auth policies like apiKeyAuthentication

  agentgateway/agentgateway#3716 · Filter by author yamt opened on Oct 1, 2026

• Access log: a call denied by mcpAuthorization is indistinguishable from a call to a nonexistent tool

  agentgateway/agentgateway#3710 · Filter by author MattyIceMatrix opened on Sep 30, 2026
  2

• MCP initialize returns the name and instructions of targets the caller is not authorized to use

  agentgateway/agentgateway#3708 · Filter by author rinormaloku opened on Sep 30, 2026
  3

• feature request: ext-proc failure metrics

  needs-decision
  agentgateway/agentgateway#3705 · Filter by author yamt opened on Sep 30, 2026

• Feature Request: SSF Receiver for Token Exchange Cache Purge

  agentgateway/agentgateway#3696 · Filter by author jbspeakr opened on Sep 29, 2026

• AWS Bedrock(Anthropic): dropping certain content block types also drops their cache_control, breaking prompt caching in long agentic sessions

  agentgateway/agentgateway#3683 · Filter by author prasvats opened on Sep 28, 2026
  

• AWS Bedrock(Anthropic): cache_control ttl is ignored, always falls back to 5m

  agentgateway/agentgateway#3670 · Filter by author prasvats opened on Sep 25, 2026

• MCP auth with provider set: RFC 9207 clients (e.g. Claude Code) reject the login because the authorization response bypasses the gateway

  agentgateway/agentgateway#3668 · Filter by author nissessenap opened on Sep 25, 2026
  1

• No native multipart/form-data parsing available in transformation policies

  agentgateway/agentgateway#3667 · Filter by author mfournioux opened on Sep 25, 2026
  1

• vertex gemini (Messages, #2784): mid-conversation system messages break Vertex implicit caching

  agentgateway/agentgateway#3666 · Filter by author markcheret opened on Sep 25, 2026
  1

• feat: allow configuring the advertised Gateway base URL for Client Setup

  agentgateway/agentgateway#3664 · Filter by author guenhter opened on Sep 25, 2026

• Docs result in legacy backend configuration for setting up passthrough to a Claude Subscription

  agentgateway/agentgateway#3655 · Filter by author okbrown opened on Sep 24, 2026
  1

  

• AI backend provider-level P2C ignores replica count behind  custom   backendRef  — mixing a Service-backed provider with single-host providers skews traffic away from the Service

  agentgateway/agentgateway#3640 · Filter by author mfournioux opened on Sep 23, 2026
  1

• bug(mcp/keycloak): authorization response issuer mismatch (RFC 9207) breaks Keycloak provider for strict clients

  agentgateway/agentgateway#3635 · Filter by author Tazmainiandevil opened on Sep 23, 2026

• hybrid store: no way to attach a policy to a file-owned route at runtime (route must be store-owned wholesale)

  agentgateway/agentgateway#3629 · Filter by author ld-873233 opened on Sep 22, 2026

• Azure Content Safety applies one severity threshold to all four harm categories

  agentgateway/agentgateway#3626 · Filter by author DevArjun23 opened on Sep 22, 2026
  1

• bug(mcp): an expired session of one multiplexed upstream is relayed as an opaque error — no upstream re-initialize, no 404 to the client

  agentgateway/agentgateway#3622 · Filter by author Albe83 opened on Sep 22, 2026

• Unreachable JWKS endpoint fails the gateway from loading config

  agentgateway/agentgateway#3616 · Filter by author medhavib opened on Sep 22, 2026
  4