Issues

• Optional per-agent trust signal (AgentCert + TrustScore) in the gateway?

  Helicone/helicone#5831 · Filter by author karlmehta opened on Oct 5, 2026

• [Feature]: Add eu/jev decision API provider

  Helicone/helicone#5829 · Filter by author edujuan opened on Oct 1, 2026
  1

• [Bug]: Cross-tenant prompt injection via missing org filter when forking a prompt version

  Helicone/helicone#5824 · Filter by author lokeshramchand-ctrl opened on Sep 27, 2026

• Optional lifecycle field on ModelConfig — 21 priced models are already retired at their provider

  Helicone/helicone#5820 · Filter by author joelp22-maker opened on Sep 20, 2026

• [Feature]: OrcaRouter provider support for Helicone's AI Gateway

  Helicone/helicone#5811 · Filter by author martinzudergaming-a11y opened on Sep 8, 2026
  1

• Cost registry: how should a provider whose model ids are market instruments be represented?

  Helicone/helicone#5809 · Filter by author CastilloLuis opened on Sep 5, 2026

• openAIUsageProcessor: accepted_prediction_tokens added (not subtracted) into output — cost overstated for Predicted Outputs

  Helicone/helicone#5805 · Filter by author roy-tong opened on Sep 3, 2026
  2

• OpenAI-compat: gateway /v1 plus origin-only Helicone-Target-URL, not oai.helicone.ai

  Helicone/helicone#5795 · Filter by author cursor opened on Aug 28, 2026

• Adding a gateway to the cost registry: which shape do you want?

  Helicone/helicone#5794 · Filter by author cuihuan opened on Aug 28, 2026

• docs.helicone.ai llms.txt: two dead internal links (/features/prompts/generate, /features/prompts/editor → 404)

  Helicone/helicone#5790 · Filter by author wallidsaydi-creator opened on Aug 24, 2026

• [Bug]: Long-context tier starts one token early — getPricingTier is inclusive, Google and OpenAI document their thresholds as exclusive

  Helicone/helicone#5788 · Filter by author xyzs996 opened on Aug 22, 2026
  3

• Optional EvalPort interop for datasets and experiment scores

  Helicone/helicone#5787 · Filter by author adhabnr-ux opened on Aug 22, 2026

• How to privately report a security vulnerability? (PVR not enabled; security@ bounced)

  Helicone/helicone#5784 · Filter by author ryosuke0828 opened on Aug 20, 2026

• dbProviderToProvider silently drops xai/perplexity/mistral/helicone provider keys — 4 of 21 providers missing

  Helicone/helicone#5782 · Filter by author Harsh23Kashyap opened on Aug 18, 2026
  1

• cacheSettings regex matches x-s-maxage (and other vendor extensions) as s-maxage — no word boundary before directive name

  Helicone/helicone#5780 · Filter by author Harsh23Kashyap opened on Aug 17, 2026
  1

• secureCache.getFromKVCacheOnly and getAndStoreInCache ignore the expirationTtl argument — caches effectively 1-minute not 12-hour

  Helicone/helicone#5775 · Filter by author Harsh23Kashyap opened on Aug 14, 2026
  1

• worker: 3 Promise.race + setTimeout sites never clearTimeout on early resolution — pending timer leaks

  Helicone/helicone#5771 · Filter by author Harsh23Kashyap opened on Aug 13, 2026
  1

• Helicone-Cache-Ignore-Keys is documented as comma-separated but parsed as wrapped JSON — single-element array, broken cache-key ignore

  Helicone/helicone#5768 · Filter by author Harsh23Kashyap opened on Aug 13, 2026
  1

• getThresholdValueFunction ignores bedrock/helicone providers, so tiered Claude never applies the >200k tier there

  Helicone/helicone#5767 · Filter by author eeshsaxena opened on Aug 9, 2026

• Cache-write cost ignores long-context pricing tier (uses base tier, ~2x undercharge on >200k Anthropic requests)

  Helicone/helicone#5766 · Filter by author eeshsaxena opened on Aug 9, 2026

• [Feature]: Governance Enforcement Layer Alongside Helicone Observability

  enhancement
  Helicone/helicone#5763 · Filter by author nagasatish007 opened on Aug 7, 2026

• Helicone was independently reviewed on Hlido — scored 90/100, right of reply open

  Helicone/helicone#5761 · Filter by author ankitkapur1992-hlido opened on Aug 3, 2026

• AttemptBuilder.buildAttempts silently skips invalid model strings (TODO flagged in source) — user typos in fallback lists produce no clear error

  Helicone/helicone#5759 · Filter by author Harsh23Kashyap opened on Aug 2, 2026
  1

• gatewayRouter getProvider: 3 err() calls without return — silently bypasses unapproved-domain rate limit and produces 500 on invalid URL

  Helicone/helicone#5757 · Filter by author Harsh23Kashyap opened on Aug 2, 2026
  1

• worker: 8 parseInt calls without radix argument across cacheFunctions, cacheSettings, HeliconeHeaders, gatewayRouter

  Helicone/helicone#5755 · Filter by author Harsh23Kashyap opened on Aug 1, 2026
  1