diff --git a/.github/risk-tiers.yml b/.github/risk-tiers.yml
index ce7428e7b6b..63d61a69f22 100644
--- a/.github/risk-tiers.yml
+++ b/.github/risk-tiers.yml
@@ -25,8 +25,8 @@ paths:
     - "litellm/proxy/_experimental/mcp_server/auth/**"
     - "litellm/proxy/_experimental/mcp_server/outbound_credentials/**"
     - "litellm/proxy/_experimental/mcp_server/discoverable_endpoints.py"
-    - "litellm/proxy/_experimental/mcp_server/*oauth*"
-    - "litellm/proxy/_experimental/mcp_server/*_flow.py"
+    - "litellm/proxy/_experimental/mcp_server/**/*oauth*"
+    - "litellm/proxy/_experimental/mcp_server/**/*_flow.py"
     - "litellm/proxy/_experimental/mcp_server/proxy_api_credentials.py"
     - ".github/**"
     - ".circleci/**"
diff --git a/tests/test_litellm/test_github_risk_tier.py b/tests/test_litellm/test_github_risk_tier.py
index eb905a2e25a..696f5464d78 100644
--- a/tests/test_litellm/test_github_risk_tier.py
+++ b/tests/test_litellm/test_github_risk_tier.py
@@ -342,6 +342,8 @@ def test_author_factor(risk_tier, rules, author, from_fork, expected):
         ("litellm/proxy/_experimental/mcp_server/byok_oauth_endpoints.py", "high"),
         ("litellm/proxy/_experimental/mcp_server/bridge_token_flow.py", "high"),
         ("litellm/proxy/_experimental/mcp_server/proxy_api_credentials.py", "high"),
+        ("litellm/proxy/_experimental/mcp_server/faults/render_oauth.py", "high"),
+        ("litellm/proxy/_experimental/mcp_server/faults/classify.py", "medium"),
         ("litellm/proxy/_experimental/mcp_server/server.py", "medium"),
         ("enterprise/litellm_enterprise/proxy/hooks/x.py", "high"),
         ("enterprise/litellm_enterprise/proxy/auth/x.py", "high"),