From dfc4401e1c305f11c898e989991503122668bede Mon Sep 17 00:00:00 2001 From: yuneng-jiang Date: Thu, 19 Mar 2026 23:00:38 -0700 Subject: [PATCH] fix: use check_db_only=True in _assert_can_manage_team_mcp_server Cached team objects may have stale object_permission data. Bypassing cache ensures the server-in-team check uses fresh data. Co-Authored-By: Claude Opus 4.6 --- litellm/proxy/management_endpoints/mcp_management_endpoints.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/litellm/proxy/management_endpoints/mcp_management_endpoints.py b/litellm/proxy/management_endpoints/mcp_management_endpoints.py index 522a533d43f..a3b0b3ab286 100644 --- a/litellm/proxy/management_endpoints/mcp_management_endpoints.py +++ b/litellm/proxy/management_endpoints/mcp_management_endpoints.py @@ -179,7 +179,7 @@ if MCP_AVAILABLE: team_id=resolved_team_id, prisma_client=prisma_client, user_api_key_cache=user_api_key_cache, - check_db_only=False, + check_db_only=True, # bypass cache to get fresh object_permission ) if not _is_user_team_mcp_manager(user_api_key_dict, team_obj):