scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-11-11 08:38:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 280

feat(mcp): validate token_response_metadata against server token_validation rules before storing credential

Browse source
This commit is contained in:
Ishaan Jaffer 2026-04-09 17:41:42 -07:00
parent a97c62a943
commit 1f9a087701
No known key found for this signature in database
1 changed files with 16 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
litellm/proxy/management_endpoints/mcp_management_endpoints.py
View file

@ -1619,6 +1619,22 @@ if MCP_AVAILABLE:
status_code=status.HTTP_404_NOT_FOUND,
detail={"error": f"MCP Server {server_id} not found"},
)
# Enforce token validation rules configured on the server.
# The caller must pass token_response_metadata with any fields
# that the server requires (e.g. enterprise_id from Slack's token response).
token_validation = getattr(mcp_server, "token_validation", None)
if token_validation and isinstance(token_validation, dict) and token_validation:
from litellm.proxy._experimental.mcp_server.discoverable_endpoints import (
_validate_token_response,
)
_validate_token_response(
token_response=payload.token_response_metadata or {},
validation_rules=token_validation,
server_id=server_id,
)
user_id = user_api_key_dict.user_id or ""
if not user_id:
raise HTTPException(