joshua-berri a4fd58501a fix(mcp): never forward the caller's LiteLLM key to MCP servers (#45401) ... * fix(mcp): never forward the caller's LiteLLM key to MCP servers Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * refactor(mcp): tidy caller-key scrub Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * test(mcp): avoid master-key scanner false positive Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * fix(mcp): match admission when scrubbing the caller key Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * refactor(mcp): drop header copy churn Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * fix(mcp): normalize bearer variants in caller-key match Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * fix(mcp): inject admission header name and cover provider keys Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * test(mcp): exercise real REST header extraction Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * test(mcp): cover caller-key scrub on the real REST path Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * fix(mcp): exclude gateway admission header from upstream forwarding * fix(mcp): skip empty admission headers when scrubbing keys * fix(mcp): use scrubbed server credentials for auth probes * fix(mcp): match probe credential precedence to upstream calls * test(mcp): simplify probe header assertion --------- Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Co-authored-by: Joshua Valluru <326636767+joshua-berri@users.noreply.github.com>		2026-10-09 03:21:07 -07:00
..
test_interactions.py	feat(mcp): translate input requests and bind continuations (#45464)	2026-10-08 20:10:10 -07:00
test_mcp_access_matrix.py	feat(mcp): hand listed-tool description and input schema to pre-call hooks per caller (#41162)	2026-10-04 00:53:58 -07:00
test_mcp_accounting_guardrails.py	test(mcp): fix stale bridge-hook, applied-guardrails and pagination-revoke integration tests (#45008)	2026-10-07 11:28:14 -07:00
test_mcp_agent_365_guardrail.py	test(ci): repair stale tests and flaky CI infrastructure (#43983)	2026-10-01 17:46:43 +00:00
test_mcp_akto_logging_only.py	feat(guardrails): support logging_only mode for the Akto guardrail (#45461)	2026-10-08 17:28:08 -07:00
test_mcp_credentials.py	fix(mcp): never forward the caller's LiteLLM key to MCP servers (#45401)	2026-10-09 03:21:07 -07:00
test_mcp_lifecycle.py	feat(mcp): hand listed-tool description and input schema to pre-call hooks per caller (#41162)	2026-10-04 00:53:58 -07:00
test_mcp_listed_tool_metadata.py	feat(mcp): hand listed-tool description and input schema to pre-call hooks per caller (#41162)	2026-10-04 00:53:58 -07:00
test_mcp_llm_endpoints.py	test(mcp): fix stale bridge-hook, applied-guardrails and pagination-revoke integration tests (#45008)	2026-10-07 11:28:14 -07:00
test_mcp_management.py	fix(mcp): keep worker MCP configurations consistent via a catalog revision (#42568)	2026-10-06 18:21:29 -07:00
test_mcp_oauth_flows.py	feat(mcp): hand listed-tool description and input schema to pre-call hooks per caller (#41162)	2026-10-04 00:53:58 -07:00
test_mcp_protocol_errors.py	feat(mcp): configure protocol versions and capability discovery (#43169)	2026-09-25 13:13:52 -07:00
test_mcp_rate_limits.py	feat(mcp): rate limit all MCP operations and add server-level rpm (#44600)	2026-10-07 16:30:52 -07:00
test_mcp_resilience.py	feat(mcp): hand listed-tool description and input schema to pre-call hooks per caller (#41162)	2026-10-04 00:53:58 -07:00
test_mcp_submission_rules.py	fix(ui): read MCP submission rules from bare-array /config/list response (#44648)	2026-10-06 10:09:46 -07:00
test_mcp_tool_permission_merge.py	refactor(types): replace Any with proven types in 7 files (#43704)	2026-09-29 06:12:58 -07:00
test_mcp_toolsets.py	feat(mcp): hand listed-tool description and input schema to pre-call hooks per caller (#41162)	2026-10-04 00:53:58 -07:00
test_mcp_transports.py	refactor(mcp): extract upstream preparation and support modern clients (#44232)	2026-10-02 16:04:11 -07:00
test_mcp_user_env_vars.py	test(mcp): stop a comprehension variable from shadowing the body() helper (#42906)	2026-09-24 11:56:56 -07:00
test_oauth_configuration.py	fix(mcp): scope OpenAPI listings to the exact server prefix and drop upstream OAuth metadata when a server is saved (#43608)	2026-09-29 17:25:39 -07:00
test_pagination.py	fix(mcp): honor scoped cache freshness (#45165)	2026-10-07 17:19:24 -07:00
test_responses_mcp_mixed_tools.py	test: fix three order-dependent and timing-flaky tests (#44271)	2026-10-02 16:29:57 -07:00