From d58b0a9e06be2b5b285a280d1c9f247a8fee472e Mon Sep 17 00:00:00 2001 From: joereyna Date: Mon, 16 Mar 2026 15:36:27 -0700 Subject: [PATCH] fix: clear oauth2_flow when client_credentials set without token_url --- litellm/proxy/_experimental/mcp_server/rest_endpoints.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/litellm/proxy/_experimental/mcp_server/rest_endpoints.py b/litellm/proxy/_experimental/mcp_server/rest_endpoints.py index 5faa0104ac1..ef01f027d6f 100644 --- a/litellm/proxy/_experimental/mcp_server/rest_endpoints.py +++ b/litellm/proxy/_experimental/mcp_server/rest_endpoints.py @@ -910,6 +910,10 @@ if MCP_AVAILABLE: else None ) ) + # client_credentials requires token_url to fetch a token; without it the + # incoming auth header would be dropped with nothing to replace it. + if _oauth2_flow == "client_credentials" and not request.token_url: + _oauth2_flow = None server_model = MCPServer( server_id=request.server_id or "",