From 2a4cf5a78deca5d48f8d051798fae3f722aaaefa Mon Sep 17 00:00:00 2001
From: mateo-berri <277851410+mateo-berri@users.noreply.github.com>
Date: Sat, 5 Sep 2026 15:00:22 -0700
Subject: [PATCH] fix(proxy): hide WIF secret references from /health output

---
 litellm/proxy/health_check.py                                  | 3 +++
 .../proxy/health_endpoints/test_health_endpoints.py            | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/litellm/proxy/health_check.py b/litellm/proxy/health_check.py
index 219f6f270ed..7eab47192a1 100644
--- a/litellm/proxy/health_check.py
+++ b/litellm/proxy/health_check.py
@@ -47,6 +47,9 @@ ILLEGAL_DISPLAY_PARAMS: Final = [
     "aws_secret_access_key",
     "aws_session_token",
     "aws_web_identity_token",
+    "anthropic_identity_token",
+    "anthropic_issuer_signing_key_ref",
+    "anthropic_keycloak_client_secret_ref",
     "extra_headers",
     "headers",
     "exception",  # internal; not JSON-serializable, never for display
diff --git a/tests/test_litellm/proxy/health_endpoints/test_health_endpoints.py b/tests/test_litellm/proxy/health_endpoints/test_health_endpoints.py
index e9e58347337..ae503a70784 100644
--- a/tests/test_litellm/proxy/health_endpoints/test_health_endpoints.py
+++ b/tests/test_litellm/proxy/health_endpoints/test_health_endpoints.py
@@ -2553,6 +2553,9 @@ def test_clean_endpoint_data_strips_extra_headers_and_aws_session_token():
         "aws_secret_access_key",
         "aws_session_token",
         "aws_web_identity_token",
+        "anthropic_identity_token",
+        "anthropic_issuer_signing_key_ref",
+        "anthropic_keycloak_client_secret_ref",
         "vertex_credentials",
         "vertex_ai_credentials",
         "extra_headers",