From c6a41a57fe911c079b3b6426ff094e65df7b731d Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Mon, 11 May 2026 03:52:18 +0000 Subject: [PATCH] Hash MCP session user owner fingerprints --- litellm/proxy/_experimental/mcp_server/server.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/litellm/proxy/_experimental/mcp_server/server.py b/litellm/proxy/_experimental/mcp_server/server.py index 31df1a31b91..5456da678e3 100644 --- a/litellm/proxy/_experimental/mcp_server/server.py +++ b/litellm/proxy/_experimental/mcp_server/server.py @@ -2706,7 +2706,10 @@ if MCP_AVAILABLE: ).hexdigest() return f"key:{api_key_hash}" if user_api_key_auth.user_id: - return f"user:{user_api_key_auth.user_id}" + user_id_hash = hashlib.sha256( + user_api_key_auth.user_id.encode("utf-8") + ).hexdigest() + return f"user:{user_id_hash}" if oauth2_headers: authz = oauth2_headers.get("Authorization") or oauth2_headers.get( "authorization"