From 2dae6cb82de7cfa9345d660060141ecc165a22b4 Mon Sep 17 00:00:00 2001 From: Ishaan Jaffer Date: Fri, 13 Feb 2026 11:06:17 -0800 Subject: [PATCH] feat(mcp): handle oauth2_token_exchange in MCP client auth headers Adds the oauth2_token_exchange case to _get_auth_headers() so the exchanged token is sent as a Bearer token to the MCP server. Co-Authored-By: Claude Opus 4.6 --- litellm/experimental_mcp_client/client.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/litellm/experimental_mcp_client/client.py b/litellm/experimental_mcp_client/client.py index e703a3956b9..0dc56b6a3bc 100644 --- a/litellm/experimental_mcp_client/client.py +++ b/litellm/experimental_mcp_client/client.py @@ -366,6 +366,8 @@ class MCPClient: headers["Authorization"] = f"Bearer {self._mcp_auth_value}" elif self.auth_type == MCPAuth.token: headers["Authorization"] = f"token {self._mcp_auth_value}" + elif self.auth_type == MCPAuth.oauth2_token_exchange: + headers["Authorization"] = f"Bearer {self._mcp_auth_value}" elif isinstance(self._mcp_auth_value, dict): headers.update(self._mcp_auth_value) # Note: aws_sigv4 auth is not handled here — SigV4 requires per-request