Tin Chi Lo 2ccdb0896d feat(mcp): send RFC 8707 resource indicators on upstream OAuth legs ... The gateway acts as an MCP client toward upstream MCP servers, and the MCP authorization spec requires an MCP client to send the RFC 8707 resource parameter on both the authorization request and every token request. The gateway sent it on none of its upstream OAuth legs, so an authorization server that requires resource indicators rejected the exchange with invalid_target with no way to configure around it. Authorization servers disagree irreconcilably and nothing advertises which camp they are in, so this is a per-server opt-in rather than a default: most providers ignore the parameter, some hard-reject it and carry audience in scopes instead, and strict or MCP-native ones refuse to mint a correctly scoped token without it. The new upstream_resource setting is unset by default, which keeps today's requests byte-identical. Both outbound OAuth stacks resolve the value from the server exactly once and carry it structurally rather than attaching it per call site. In v1 every plain-OAuth2 token leg builds its body through one helper that resolves the resource in the same call as the mandatory client authentication; in v2 the adapter, the single place an MCPServer becomes an outbound config, resolves it onto the client_credentials config that the HTTP/SSE M2M path uses, and it joins the config's mint identity so retargeting a live server refreshes the token rather than serving the previous audience's. A leg cannot authenticate without also naming the resource its sibling legs named, which is what an attach-per-call-site approach kept getting wrong. The setting is non-secret admin config sharing a blob with real secrets, and the backend classifies which key is which rather than nulling the blob wholesale or gating on its truthiness: redaction returns admin config to an admin, session inheritance ignores it when deciding whether a real credential was supplied and carries it onto the derived server, and the edit form renders the same shared OAuth component as create so the field exists on both, an emptied field submitting an explicit null that the credential merge drops.		2026-07-24 15:01:38 -07:00
..
_experimental/mcp_server	feat(mcp): send RFC 8707 resource indicators on upstream OAuth legs	2026-07-24 15:01:38 -07:00
a2a	fix(a2a): reject malformed protocolVersion suffixes while keeping semver prereleases	2026-07-21 13:24:58 -07:00
agent_endpoints	fix(a2a): reject malformed protocolVersion suffixes while keeping semver prereleases	2026-07-21 13:24:58 -07:00
anthropic_endpoints	feat: litellm oss staging (#31935)	2026-07-03 09:27:31 +05:30
auth	feat(mcp): gateway DCR session admission at the aggregate /mcp endpoint (LIT-3637)	2026-07-23 00:24:28 -07:00
batches_endpoints	test(batches): add 1:1 test file scaffold for batches component paths (#30529)	2026-06-29 09:22:58 +05:30
client	fix(autoroute): discover models via /v1/models so an AI-API-only key works (#34259)	2026-07-22 20:50:14 -07:00
common_utils	fix(ui): surface env-var-sourced theme and logging-callback settings (#34156)	2026-07-21 18:36:31 -07:00
config_resolvers	fix(ui): resolve SSO and SMTP settings from a typed config object (#33576)	2026-07-22 14:47:35 -07:00
db	feat(spend): track prompt compression saved tokens in daily spend aggregates (#33810)	2026-07-18 17:47:54 -07:00
discovery_endpoints	chore: litellm oss staging160626 (#30527)	2026-06-16 18:23:13 -07:00
enterprise_billing	feat(proxy): push-based OTLP billable-request metering for enterprise deployments (#31592)	2026-07-15 12:12:52 -07:00
experimental/mcp_server
google_endpoints	chore: litellm oss staging160626 (#30527)	2026-06-16 18:23:13 -07:00
guardrails	feat(guardrails): add only_scan_new_messages for per-session incremental scanning (#33278)	2026-07-22 09:56:59 -07:00
health_endpoints	fix(proxy): authorize /health/test_connection against loaded deployment's team_id (VERIA-441) (#31767)	2026-07-01 17:05:49 -07:00
hooks	fix(proxy): enforce max_parallel_requests as a per-slot concurrency gauge (#32441)	2026-07-17 09:29:08 -07:00
image_endpoints	fix(proxy): extend response headers hook to streaming, TTS, image gen, and pass-through (#24232)	2026-06-09 22:10:23 +02:00
logging_endpoints	feat(proxy): add POST /v1/callbacks/logs to replay logging payloads through callbacks (#31134)	2026-06-24 15:25:10 -07:00
management_endpoints	feat(mcp): send RFC 8707 resource indicators on upstream OAuth legs	2026-07-24 15:01:38 -07:00
management_helpers	fix(scim): use members_with_roles as the source of truth for group membership (#34162)	2026-07-22 13:58:15 -07:00
memory	Litellm memory improvements v2 (#26541)	2026-04-25 19:03:43 -07:00
middleware	feat(proxy): push-based OTLP billable-request metering for enterprise deployments (#31592)	2026-07-15 12:12:52 -07:00
openai_files_endpoint	fix(vertex/files): stream OpenAI->Vertex batch JSONL uploads (#31036)	2026-06-24 13:19:57 -07:00
pass_through_endpoints	fix(passthrough): stop classifying plain 'predict'/'search' paths as Vertex (#33658)	2026-07-17 19:20:00 -07:00
policy_engine	fix(policies): reject non-existent team/key/model scope entries on attachment create (#32131)	2026-07-04 11:58:29 -07:00
prompts	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
proxy_server	feat(mcp): gateway DCR session admission at the aggregate /mcp endpoint (LIT-3637)	2026-07-23 00:24:28 -07:00
public_endpoints	fix(agents): allow optional securityScheme fields so /public/agent_hub does not 500 (#33897)	2026-07-20 18:13:09 -07:00
rag_endpoints	fix(rag): track LLM completion usage and spend for /v1/rag/query (#32438)	2026-07-17 17:45:27 +00:00
realtime_endpoints	chore: litellm oss 170626 (#30637)	2026-06-17 21:11:12 -07:00
response_api_endpoints	Litellm websocket improvements (#29563)	2026-06-03 11:48:35 -07:00
shutdown	feat(proxy): native /health/drain preStop hook for graceful shutdown (#29439)	2026-06-02 16:30:44 -07:00
spend_tracking	feat(spend): raise /spend/logs/v2 page_size cap to 1000	2026-07-20 09:55:38 -07:00
test_configs
types_utils	fix(proxy): resolve router_settings.plugins dotted paths and load plugins from installed packages (#33644)	2026-07-17 11:23:18 -07:00
ui_crud_endpoints	fix(ui): resolve SSO and SMTP settings from a typed config object (#33576)	2026-07-22 14:47:35 -07:00
utils	fix(proxy): source /v1/models token limits from the cost map instead of Router.get_model_group_info (#33721)	2026-07-17 20:04:18 -07:00
vector_store_endpoints	test(vector_store): update credential resolution assertion for team_id kwarg	2026-07-18 18:41:12 +00:00
video_endpoints	test(videos): add 1:1 test file scaffold for videos component paths (#30631)	2026-06-29 09:12:51 +05:30
__init__.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
conftest.py	fix(proxy): recover Prisma DB reconnect loop when client is disconnected	2026-07-07 09:50:27 +03:00
test_aiohttp_cleanup_closed.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_aiohttp_session_recovery.py	fix: use AsyncMock for concurrent test consistency	2026-03-18 00:54:23 +00:00
test_api_key_masking_in_errors.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_audio_speech_prometheus_hooks.py	fix(proxy): extend response headers hook to streaming, TTS, image gen, and pass-through (#24232)	2026-06-09 22:10:23 +02:00
test_batch_expiry.py	fix(proxy): strip LiteLLM policy tracking from OpenAI batch metadata (#28425)	2026-05-26 11:35:42 -07:00
test_batch_metadata_none_fix.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_batch_retrieve_bedrock.py	fix(proxy/batches): forward model to retrieve_batch for bedrock	2026-04-29 22:48:03 +02:00
test_batch_x_litellm_model_encoding.py	test(batches): move orphan tests into tests/test_litellm for CI coverage (#30510)	2026-06-16 10:20:59 -07:00
test_blocked_response_usage.py	feat: litellm oss staging (#31935)	2026-07-03 09:27:31 +05:30
test_budget_reservation.py	test(proxy): make streaming-cancel mocks awaitable for the disconnect slot release (#33802)	2026-07-18 01:50:20 +00:00
test_caching_routes.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_chat_completion_metadata.py
test_common_request_processing.py	feat(complexity-router): add return_raw_model_name toggle for response model field (#33875)	2026-07-18 19:24:56 -07:00
test_component_allowlists.py	fix(gateway): keep the Prometheus /metrics Mount in the gateway route trim (#32317)	2026-07-07 18:36:38 +03:00
test_cors_config.py	refactor: extract _get_cors_config() for testability, fix no-op CORS tests	2026-04-11 22:24:04 +05:30
test_custom_proxy.py
test_dynamic_mcp_route.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_empty_model_list.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_enforce_user_param.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_fallback_management_endpoints.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_fastapi_offline_routes.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_filter_models_by_team_access_group.py	fix: resolve access group names in _filter_models_by_team_id (#25224)	2026-05-01 11:55:36 +05:30
test_health_check_functions.py	feat(proxy): skip disable_background_health_check models on GET /health when flag set (#27716)	2026-05-13 09:49:05 -07:00
test_health_check_max_tokens.py	fix: skip health check for semantic auto_router deployments (#31668)	2026-06-29 19:47:20 -07:00
test_langfuse_passthrough_security.py	chore(callbacks): guard dynamic integration hosts	2026-04-30 14:27:19 -07:00
test_lazy_openapi_snapshot.py	[Fix] Tests: Move Misplaced Import in Lazy OpenAPI Snapshot Test	2026-05-01 14:24:53 -07:00
test_litellm_pre_call_utils.py	feat(proxy): auto-enable drop_params for Codex user agents	2026-07-20 19:58:47 -07:00
test_max_budget_env_var.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_mcp_asgi_response.py	fix(mcp): surface upstream 401 for token-forwarding MCP servers (#27847)	2026-05-13 12:03:36 -07:00
test_model_based_routing_files_batches.py	test(batches): move orphan tests into tests/test_litellm for CI coverage (#30510)	2026-06-16 10:20:59 -07:00
test_model_dump_with_preserved_fields.py	Fix_mapped tests part 2	2026-02-26 12:43:39 +05:30
test_model_id_header_propagation.py	feat(proxy): add x-litellm-model-name response header with deployment model string (#33698)	2026-07-17 20:29:42 -07:00
test_model_info_default_limits.py	fix(proxy): align /v1/model/info with router deployments (#30025)	2026-06-10 19:38:21 -07:00
test_model_level_guardrails.py	fix(guardrails): run pre_call hook once for model-level guardrails (#30543)	2026-06-16 11:17:03 -07:00
test_model_list_healthy_only.py	feat: litellm oss 110626 (#30202)	2026-06-11 22:30:26 -07:00
test_modify_response_streaming_passthrough.py	fix(proxy): use e.request_data for logging_obj in ModifyResponseException streaming passthrough (#30800)	2026-06-18 23:29:08 -07:00
test_openapi_schema_validation.py	fix(proxy): preserve HTTP operations when injecting WebSocket stubs into OpenAPI schema	2026-05-06 00:28:42 +02:00
test_plugin_routes.py	feat: litellm plugin architecture v2 (#30688)	2026-06-20 20:37:22 -07:00
test_pricing_field_strip.py	chore: litellm oss staging160626 (#30527)	2026-06-16 18:23:13 -07:00
test_prometheus_cleanup.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_provider_url_destination_guard.py	chore(proxy): clean up request parameter validation and provider destination handling (#34189)	2026-07-22 00:57:58 +00:00
test_proxy_cli.py	chore(ci): merge oss branch (#33784)	2026-07-17 23:22:13 +00:00
test_proxy_logging_hook_detection.py	perf: reduce per-request and per-chunk overhead across Anthropic streaming hot paths (#28289)	2026-05-23 12:15:59 -07:00
test_proxy_server.py	feat(mcp): gateway DCR session admission at the aggregate /mcp endpoint (LIT-3637)	2026-07-23 00:24:28 -07:00
test_proxy_types.py	fix(router): apply team/key enable_tag_filtering to tag routing (#33436)	2026-07-16 14:41:24 -07:00
test_proxy_utils.py	fix(autoroute): discover models via /v1/models so an AI-API-only key works (#34259)	2026-07-22 20:50:14 -07:00
test_pyroscope.py	Implement normalize_nonempty_secret_str function to trim whitespace from secrets and treat empty values as unset. Update proxy_server to use this function for Grafana credentials. Enhance tests to validate the new normalization behavior.	2026-05-04 18:17:31 +00:00
test_read_model_list.py	feat: add minimal rust router + axum ai-gateway calling router.realtime (2/2) (#31135)	2026-06-23 19:16:34 -07:00
test_redis_auth_cache_flag.py	fix(proxy): share CLI SSO login sessions across workers without enable_redis_auth_cache (#33261)	2026-07-22 10:29:34 -07:00
test_response_model_sanitization.py	perf: eliminate per-request callback scanning on proxy hot path (#27858)	2026-05-14 09:28:31 -07:00
test_route_a2a_models.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_route_llm_request.py	fix(router): apply team/key enable_tag_filtering to tag routing (#33436)	2026-07-16 14:41:24 -07:00
test_sensitive_route_auth.py	chore(proxy): guard sensitive public endpoints	2026-04-30 11:52:47 -07:00
test_shared_health_check.py	feat(proxy): skip disable_background_health_check models on GET /health when flag set (#27716)	2026-05-13 09:49:05 -07:00
test_spend_log_cleanup.py	feat(spend_logs): opt-in native Postgres partitioning for SpendLogs retention (#29466)	2026-06-11 11:02:42 -07:00
test_swagger_chat_completions.py	fix(proxy): avoid misleading multi-method operation ids	2026-04-30 20:44:14 -07:00
test_team_member_update.py	feat(ui): add budget duration to edit team member form (#29717)	2026-06-06 17:24:55 -07:00
test_team_org_move.py	fix(team_endpoints): auto-add SSO team members to org on move (proxy admin only) (#26377)	2026-04-24 08:36:25 -07:00
test_tools_allowlist_enforcement.py	fix(responses-bridge): custom tool round-trip and allowlist preservation for Codex CLI (#32258)	2026-07-06 17:34:27 -07:00
test_update_llm_router_resilience.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00