scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-09-17 23:51:30 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 66
litellm/tests/test_litellm/proxy/_experimental
History
Exact
Tin Chi Lo 1c3c1af529 fix(mcp): run proxy-wide pre-DB gates on bridge envelope admission 
The envelope arm bypasses user_api_key_auth, so it never ran
pre_db_read_auth_checks (request-size and body-safety limits, the IP allowlist,
and the general_settings route allowlist) that the normal MCP admission path
runs before any key lookup. A caller blocked by IP or a disallowed proxy route
could be admitted through an envelope where the same principal on the normal
path is rejected. Run those gates before the envelope crypto, mirroring the
pipeline's pre-DB ordering; a blocked IP or route surfaces its own 403.
2026-07-11 14:39:57 -07:00
..
mcp_server fix(mcp): run proxy-wide pre-DB gates on bridge envelope admission 2026-07-11 14:39:57 -07:00