From faa0186bab63849540cdcd9339edf415b487a58f Mon Sep 17 00:00:00 2001
From: shivam <shivam@uni.minerva.edu>
Date: Fri, 19 Dec 2025 17:12:58 -0800
Subject: [PATCH] remove fields with credentials

---
 litellm/litellm_core_utils/sensitive_data_masker.py | 1 +
 litellm/router.py                                   | 3 ---
 2 files changed, 1 insertion(+), 3 deletions(-)

diff --git a/litellm/litellm_core_utils/sensitive_data_masker.py b/litellm/litellm_core_utils/sensitive_data_masker.py
index 206810943ca..9e5fc5f59a3 100644
--- a/litellm/litellm_core_utils/sensitive_data_masker.py
+++ b/litellm/litellm_core_utils/sensitive_data_masker.py
@@ -18,6 +18,7 @@ class SensitiveDataMasker:
             "token",
             "auth",
             "credential",
+            "credentials",
             "access",
             "private",
             "certificate",
diff --git a/litellm/router.py b/litellm/router.py
index 6821ab9e6c6..53fc30e3060 100644
--- a/litellm/router.py
+++ b/litellm/router.py
@@ -1169,9 +1169,6 @@ class Router:
             if litellm.redact_user_api_key_info:
                 masker = SensitiveDataMasker(visible_prefix=2, visible_suffix=0)
                 _deployment_copy["litellm_params"] = masker.mask_dict(litellm_params)
-            elif "api_key" in litellm_params:
-                litellm_params["api_key"] = litellm_params["api_key"][:2] + "*" * 10
-
             return _deployment_copy
         except Exception as e:
             verbose_router_logger.debug(