diff --git a/litellm/proxy/_experimental/mcp_server/AGENTS.md b/litellm/proxy/_experimental/mcp_server/AGENTS.md
index a35e5d1ce10..fa83f86a675 100644
--- a/litellm/proxy/_experimental/mcp_server/AGENTS.md
+++ b/litellm/proxy/_experimental/mcp_server/AGENTS.md
@@ -21,6 +21,7 @@ litellm/proxy/_experimental/mcp_server/
     user_api_key_auth_mcp.py # LiteLLM admission auth and MCP request headers
     token_exchange.py        # OAuth token exchange handling                    [unchanged; V1TokenExchangeAdapter delegates here]
     litellm_auth_handler.py  # authenticated-user adapter for MCP sessions
+  client_allowlist.py        # gateway-level client application allowlist (mcp_allowed_clients); leaf module, no litellm.proxy imports
   outbound_credentials/      # NEW — typed upstream-credential resolution (resolve_credentials + arms)
     __init__.py              # public surface: resolve_credentials, the configs, CredError
     result.py                # Ok | Error union (pure stdlib)