Issues

• [BUG] IT suite fails to load when a feature runs against both bundled and addPoliciesFrom policies on overlapping gateway versions

  Aspect/TestingSeverity/MajorType/Bug
  Bug

  wso2/api-platform#3633 · Filter by author chamajay opened on Oct 1, 2026
  

• [Improvement]: Support masking sensitive fields in the request body in traffic logs

  Aspect/LoggingType/Improvement
  wso2/api-platform#3627 · Filter by author tharikaGitHub opened on Oct 1, 2026

• [Bug]: Certificate notAfter does not match its OpenAPI date-time format

  Area/GatewayAspect/APISeverity/MinorType/Bug
  wso2/api-platform#3626 · Filter by author Tharsanan1 opened on Oct 1, 2026

• [Bug]: Integration tests intermittently fail with connection refused to a testbench service's published port

  Area/GatewayAspect/TestingSeverity/MinorType/Bug
  wso2/api-platform#3624 · Filter by author Tharsanan1 opened on Oct 1, 2026

• [Bug]: A newly deployed API briefly answers 500 because its route reaches Envoy before its policy chain reaches the policy engine

  Area/GatewayArea/PolicyEngineAspect/APISeverity/MinorType/Bug
  wso2/api-platform#3621 · Filter by author Tharsanan1 opened on Oct 1, 2026

• [Improvement]: [Implementation] Add typesafe provider and jev model support for API Platform

  Area/AIGatewayArea/AIPoliciesArea/AIWorkspaceAspect/AIType/Improvement
  Feature

  wso2/api-platform#3617 · Filter by author DinithHerath opened on Oct 1, 2026
  1

  

• [Bug]: API Portal - MCP Registry API: a new server version can't be published after the old one is deleted, and servers created through the Management API return 404 on detail

  Aspect/APISeverity/MajorType/Bug
  Bug

  wso2/api-platform#3610 · Filter by author Thenujan-Nagaratnam opened on Sep 30, 2026

• [Bug]: AI Workspace doesn't have proper curl

  Aspect/APIAspect/UISeverity/MajorType/Bug
  Bug

  wso2/api-platform#3602 · Filter by author tharindu1st opened on Sep 29, 2026

• [Feature]: Backstage plugin for API Platform

  Aspect/OtherDesign DoneFeature CompleteTesting Done
  Feature

  wso2/api-platform#3590 · Filter by author Isuranga-2001 opened on Sep 28, 2026
  

• [Feature]: Optional rich policy forms in AI Workspace from a UI schema in the policy definition

  Area/AIWorkspaceAspect/UIAspect/UXType/New Feature
  wso2/api-platform#3582 · Filter by author randilt opened on Sep 25, 2026

• [Improvement]: Optional Jev check in semantic-cache to decide which responses to store

  Area/AIPoliciesAspect/AIType/Improvement
  wso2/api-platform#3580 · Filter by author randilt opened on Sep 25, 2026

• [Improvement]: TLS Support for Redis in API Platform Gateway 1.2.0

  Aspect/OtherType/Improvement
  wso2/api-platform#3579 · Filter by author SameeraSI opened on Sep 25, 2026

• Bind MCP proxy discovery data to the validated upstream endpoint and credentials

  wso2/api-platform#3577 · Filter by author coderabbitai opened on Sep 25, 2026
  2

• [Improvement]: Support RFC 9535 JSONPath (filters, [*], slices) in the SDK's JSONPath helpers

  Area/AIPoliciesArea/PoliciesType/Improvement
  wso2/api-platform#3571 · Filter by author randilt opened on Sep 25, 2026

• [Feature]: typesafe-jev-mcp-tool-guardrail — block risky MCP tool calls, using Jev

  Area/AIPoliciesAspect/AIType/New Feature
  wso2/api-platform#3558 · Filter by author randilt opened on Sep 24, 2026
  1

  

• [Feature]: typesafe-jev-tool-filtering — send only the tools a request needs, using Jev

  Area/AIPoliciesAspect/AIType/New Feature
  wso2/api-platform#3552 · Filter by author randilt opened on Sep 24, 2026
  

• Multi-provider oauth2 loopback auth still runs before body-phase routers choose a provider

  Area/AIGatewayArea/AIPoliciesbugSeverity/Minor
  wso2/api-platform#3548 · Filter by author randilt opened on Sep 24, 2026

• UpstreamName routing convention for the primary provider is undocumented; fails silently as a 503 instead of a clear error

  Area/AIPoliciesArea/PolicyEnginedocumentationSeverity/Minor
  wso2/api-platform#3537 · Filter by author randilt opened on Sep 23, 2026
  1

• LlmProxy additionalProviders have no way to set loopback auth, breaking provider routing for secured providers

  Area/AIPoliciesArea/AIWorkspacebugSeverity/Major
  wso2/api-platform#3536 · Filter by author randilt opened on Sep 23, 2026

• [Task]: PoC - integrating TypeSafe AI's Jev with AI Gateway policies

  Area/AIPoliciesArea/AIWorkspaceAspect/AIType/Task
  Task

  wso2/api-platform#3517 · Filter by author randilt opened on Sep 22, 2026
  1

  

• Scope API Control Plane BFF refresh-token cookie to a dedicated path

  Aspect/UISeverity/CriticalType/Improvement
  wso2/api-platform#3514 · Filter by author coderabbitai opened on Sep 22, 2026

• [Task]: A2A support on the AI Workspace

  Aspect/AIType/Task
  Task

  wso2/api-platform#3503 · Filter by author Irash-Perera opened on Sep 21, 2026
  2

  

• LLM proxy can be deployed against an undeployed provider

  Area/GatewayArea/Platform-APIAspect/AISeverity/Major
  wso2/api-platform#3493 · Filter by author dakshina99 opened on Sep 20, 2026
  

• [Feature]: Client -> Gateway IPv6 support

  Aspect/Other
  Feature

  wso2/api-platform#3464 · Filter by author tharikaGitHub opened on Sep 16, 2026
  1

• [Bug]: Deleting a gateway removes its deployments without undeploying them

  Area/Platform-APIbugType/Bug
  wso2/api-platform#3461 · Filter by author dakshina99 opened on Sep 16, 2026