Tin 05f39bf942 fix(mcp): invalidate a browser-authorized upstream token when a mint-relevant field changes ... An admin who ran Authorize & Fetch and then changed a field that determines which upstream OAuth token gets minted kept using the stale token for tool preview, sessionStorage, and (on the backend) the stored per-user credential and its cache. Grounded in RFC 8707/8693 and the MCP auth spec, a token is bound to one tuple: resource/audience (url), OAuth mode/grant (auth_type, oauth_flow_type), the authorization-server endpoints, and the OAuth client + scopes. A shared getOAuthAuthorizationIdentity captures exactly those fields; transport (http/sse on the same url is the same audience) and delegate_auth_to_upstream (a downstream-usage toggle never sent to the authorize request) are excluded. UI: both the create and edit forms now discard the held token (React state / sessionStorage / hook, plus the fetched token + DCR client in form.credentials) whenever the identity diverges from the one it was authorized against, re-applying the admin's in-flight edit so it is never wiped. The check lives in one shared helper so the two forms cannot drift. Backend: editing an MCP server now compares the pre/post identity and, on a mint-relevant change, purges every stored per-user OAuth credential for the server (DB row + per-user token cache) so no user forwards a token minted for a resource/AS/client that no longer matches. Best-effort; a purge failure never fails the update.		2026-07-09 16:29:16 -07:00
..
auth	fix(mcp): reject duplicate Authorization headers at MCP ingress	2026-07-08 15:43:52 -07:00
guardrail_translation	fix(tests): Add missing mocks for MCP IP filtering and updated APIs (#20652)	2026-02-07 11:30:49 -08:00
outbound_credentials	Merge pull request #31989 from BerriAI/litellm_mcp_passthrough_delegate_modes	2026-07-08 17:16:37 -07:00
test_byok_oauth_endpoints.py	feat(mcp): allow native MCP OAuth support for cursor (#28327)	2026-05-20 15:28:44 -07:00
test_callback_oauth_error_responses.py	Litellm oss staging 250526 (#28770)	2026-05-26 11:57:39 -07:00
test_db_credentials.py	fix(mcp): invalidate a browser-authorized upstream token when a mint-relevant field changes	2026-07-09 16:29:16 -07:00
test_discoverable_endpoints.py	fix(mcp): recognize per-server auth header at connect and stop persisting browser-authorize tokens	2026-07-09 11:39:19 -07:00
test_is_tool_name_prefixed.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_jwt_mcp_enforcement.py	fix(mcp): resolve team.access_group_ids → MCP servers (#28997)	2026-05-27 12:36:50 -07:00
test_jwt_mcp_simple.py	fix(mcp): resolve team.access_group_ids → MCP servers (#28997)	2026-05-27 12:36:50 -07:00
test_mcp_cost_calculator.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_mcp_custom_fields.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_mcp_debug.py	chore: litellm oss staging (#30968)	2026-06-23 07:31:44 -07:00
test_mcp_discovery.py	fix(mcp): default Linear MCP registry entry to streamable HTTP (#30396)	2026-06-13 14:45:47 -07:00
test_mcp_elicitation_handler.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_env_vars.py	fix(mcp): drop orphaned per-user credential rows when an MCP server is deleted (#30141)	2026-06-10 15:56:58 -07:00
test_mcp_header_alias_utils.py	feat(mcp): Add tool call and tool list support via UI for Oauth mcps (#28454)	2026-05-22 09:04:04 -07:00
test_mcp_hook_extra_headers.py	fix(mcp): alias/display-name tool routing, REST filters, BYOK auth (#32320)	2026-07-07 20:50:21 +05:30
test_mcp_max_concurrent_requests.py	feat(ui): expose MCP max_concurrent_requests in server create and edit forms (#32397)	2026-07-07 22:47:03 -07:00
test_mcp_metadata_preservation.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_mcp_oauth_passthrough.py	fix(mcp): bind oauth_delegate discovery resource to the upstream	2026-07-07 17:32:13 -07:00
test_mcp_oauth_passthrough_cold_start.py	[internal copy of #28008] Support MCP OAuth passthrough and issuer-scoped JWT auth (#28356)	2026-06-02 12:22:04 -07:00
test_mcp_oauth_passthrough_tools.py	fix(mcp): surface tools/list 401 auth failures as a challenge on single-server routes (#31921)	2026-07-02 18:05:32 -07:00
test_mcp_partial_update.py	feat(mcp): let users select the entra_obo token_exchange profile in the UI and API (#32144)	2026-07-07 16:39:20 -07:00
test_mcp_sampling_completion_flow.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_model_access.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_model_resolution.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_priority_selection.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_request_builder.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_response_conversion.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_tool_conversion.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_server.py	fix(mcp): log only the origin of the upstream MCP url in tool-call metadata	2026-07-09 15:35:28 -07:00
test_mcp_server_identity_env.py	chore: litellm oss 170626 (#30637)	2026-06-17 21:11:12 -07:00
test_mcp_server_manager.py	fix(ui): wire the tool playground and gateway authorize flow for the client-forwarded token modes	2026-07-09 11:39:18 -07:00
test_mcp_session_logging.py	Add MCP semantic conventions to otelv2 (#29468)	2026-06-02 11:45:36 -07:00
test_mcp_sigv4_auth.py	feat(mcp): let users select the entra_obo token_exchange profile in the UI and API (#32144)	2026-07-07 16:39:20 -07:00
test_mcp_stale_session.py	fix(mcp): match sanitized per-server alias at the connect-time preemptive 401	2026-07-08 16:22:05 -07:00
test_mcp_tool_search.py	fix(mcp): log MCP tool calls returning isError=true as failures (#32238)	2026-07-08 09:02:48 -07:00
test_mcp_toolset_scope.py	fix(mcp): resolve toolset tools by the server's known prefix (#31254)	2026-06-24 20:50:16 -07:00
test_oauth2_flow_backfill.py	feat(mcp): startup backfill stamping oauth2_flow on legacy null rows (#32290)	2026-07-06 18:42:08 -07:00
test_oauth2_token_cache.py	fix(mcp): support client_secret_basic for upstream OAuth token endpoints (#31635)	2026-06-29 20:41:23 -07:00
test_openapi_to_mcp_generator.py	fix(mcp): forward extra_headers for OpenAPI MCP tools (#27383)	2026-05-09 15:10:54 -04:00
test_openapi_tool_auth.py	fix(mcp): use canonical proxy_logging_obj, deny when MCP server is unresolvable	2026-05-01 22:28:46 +00:00
test_rest_endpoints.py	fix(mcp): never forward an Authorization header that satisfied admission on the tools preview	2026-07-09 15:02:05 -07:00
test_semantic_tool_filter.py	fix(mcp): apply semantic filter to expanded litellm_proxy tools and show filtered-out count (#32285)	2026-07-07 09:23:48 -07:00
test_short_mcp_tool_prefix.py	fix(mcp): resolve toolset tools by the server's known prefix (#31254)	2026-06-24 20:50:16 -07:00
test_ui_session_utils.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_utils.py	fix(mcp): alias/display-name tool routing, REST filters, BYOK auth (#32320)	2026-07-07 20:50:21 +05:30