yucheng-berri 2ef77f30e3 fix: enforce MCP toolsets attached to a team, org, or internal user (#38488) ... * fix: enforce MCP toolsets attached to a team, org, or internal user object_permission.mcp_toolsets was resolved into servers and tools only at the key level; every other principal read mcp_tool_permissions and silently ignored its toolsets. A team/org/user toolset alongside a server grant was inert (all tools callable), a toolset alone granted nothing, and an inert team toolset let the org server list substitute for the empty team result, handing the caller every org server. Resolve toolsets at each level that resolves mcp_tool_permissions, union their servers into that level's granted server set, and count a declared key/team toolset toward has_lower_level_mcp_restrictions so the org list can only cap, never substitute, even when the toolset resolves empty. Resolves LIT-5749 * fix: deny when a team's declared MCP toolset cannot be resolved The team server resolver swallowed UnloadableEntitlementError into an empty list, so a dangling team toolset dropped the team ceiling instead of denying, unlike the org and user paths. Re-raise it so the top-level resolver denies. Also anchor the test-quality suppression comments on the patch opener lines the gate reads, with per-seam reasons.		2026-08-28 12:06:57 -07:00
..
auth	fix: enforce MCP toolsets attached to a team, org, or internal user (#38488)	2026-08-28 12:06:57 -07:00
faults	ci: lint the test tree for undefined names and fix all 30 (#37671)	2026-08-20 13:30:34 -07:00
guardrail_translation	feat(guardrails): scan and mask MCP tool results via post_mcp_call (#35155)	2026-07-30 14:10:26 -07:00
outbound_credentials	feat(mcp): let a resolved OAuth token target a custom upstream header (#38456)	2026-08-27 14:32:01 -07:00
conftest.py	test(mcp): isolate MCP discovery tests from a leaked SERVER_ROOT_PATH	2026-07-18 18:45:18 -07:00
test_byok_oauth_endpoints.py	feat(mcp): allow native MCP OAuth support for cursor (#28327)	2026-05-20 15:28:44 -07:00
test_callback_oauth_error_responses.py	Litellm oss staging 250526 (#28770)	2026-05-26 11:57:39 -07:00
test_db_credentials.py	fix(mcp): token refresh and M2M egress honor the admin-entered token URL	2026-08-26 15:31:45 -07:00
test_discoverable_endpoints.py	Merge pull request #38379 from BerriAI/litellm_mcp_oauth_admin_entered_authorize_urls	2026-08-26 17:11:00 -07:00
test_gateway_dcr_flow.py	fix(mcp): answer 503 when a refresh-token burn cannot be recorded	2026-08-20 07:56:38 -07:00
test_is_tool_name_prefixed.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_jwt_mcp_enforcement.py	fix(mcp): resolve team.access_group_ids → MCP servers (#28997)	2026-05-27 12:36:50 -07:00
test_jwt_mcp_simple.py	fix(mcp): resolve team.access_group_ids → MCP servers (#28997)	2026-05-27 12:36:50 -07:00
test_mcp_block_recording.py	fix(guardrails): record MCP tool guardrail evaluations and blocks in usage monitor	2026-08-14 17:52:36 -04:00
test_mcp_cost_calculator.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_mcp_custom_fields.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_mcp_debug.py	chore: litellm oss staging (#30968)	2026-06-23 07:31:44 -07:00
test_mcp_discovery.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_mcp_elicitation_handler.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_env_vars.py	fix(mcp): drop orphaned per-user credential rows when an MCP server is deleted (#30141)	2026-06-10 15:56:58 -07:00
test_mcp_guardrail_usage_monitor.py	fix(guardrails): record MCP tool guardrail evaluations and blocks in usage monitor	2026-08-14 17:52:36 -04:00
test_mcp_header_alias_utils.py	feat(mcp): Add tool call and tool list support via UI for Oauth mcps (#28454)	2026-05-22 09:04:04 -07:00
test_mcp_hook_extra_headers.py	fix(mcp): keep upstream OAuth Authorization when jwt signer hook injects one on tools/call (#38555)	2026-08-27 12:44:36 -07:00
test_mcp_max_concurrent_requests.py	feat(ui): expose MCP max_concurrent_requests in server create and edit forms (#32397)	2026-07-07 22:47:03 -07:00
test_mcp_metadata_preservation.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_mcp_oauth_passthrough.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_mcp_oauth_passthrough_cold_start.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_mcp_oauth_passthrough_tools.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_mcp_partial_update.py	fix(mcp): never write discovery results to the row, heal rows a release already stamped, and retry failed discovery with backoff	2026-07-29 17:51:22 -07:00
test_mcp_sampling_completion_flow.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_model_access.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_model_resolution.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_priority_selection.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_request_builder.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_response_conversion.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_tool_conversion.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_server.py	fix(mcp): strip root_path before matching the per-server MCP route spelling (#35576)	2026-08-21 15:40:14 -07:00
test_mcp_server_identity_env.py	chore: litellm oss 170626 (#30637)	2026-06-17 21:11:12 -07:00
test_mcp_server_manager.py	feat(mcp): let a resolved OAuth token target a custom upstream header (#38456)	2026-08-27 14:32:01 -07:00
test_mcp_session_logging.py	Add MCP semantic conventions to otelv2 (#29468)	2026-06-02 11:45:36 -07:00
test_mcp_sigv4_auth.py	fix(mcp): persist config.yaml DCR clients in a server-scoped store	2026-07-17 19:42:32 -07:00
test_mcp_stale_session.py	ci: lint the test tree for undefined names and fix all 30 (#37671)	2026-08-20 13:30:34 -07:00
test_mcp_tool_search.py	fix(a2a): attribute agent search embedding spend to the calling key	2026-08-27 19:11:00 -07:00
test_mcp_toolset_scope.py	fix(mcp): use a toolset row's stored tool name as written	2026-07-24 17:06:08 -07:00
test_oauth2_flow_backfill.py	feat(mcp): startup backfill stamping oauth2_flow on legacy null rows (#32290)	2026-07-06 18:42:08 -07:00
test_oauth2_token_cache.py	feat(mcp): let a resolved OAuth token target a custom upstream header (#38456)	2026-08-27 14:32:01 -07:00
test_oauth_issuer_stamp_backfill.py	fix(mcp): never write discovery results to the row, heal rows a release already stamped, and retry failed discovery with backoff	2026-07-29 17:51:22 -07:00
test_openapi_to_mcp_generator.py	fix(mcp): stop reporting failed OpenAPI tool calls as successes (#37496)	2026-08-19 14:26:02 -07:00
test_openapi_tool_auth.py	feat(mcp): let a resolved OAuth token target a custom upstream header (#38456)	2026-08-27 14:32:01 -07:00
test_proxy_api_credentials.py	fix(proxy): refuse a teamless native-client grant for a user who has teams	2026-08-20 05:37:35 -07:00
test_rest_endpoints.py	fix(mcp): deny the interactive dcr_bridge authorize for a user without server access (#37865)	2026-08-21 12:27:00 -07:00
test_semantic_tool_filter.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_short_mcp_tool_prefix.py	test: require a match= on broad pytest.raises, and drop duplicate parametrize cases (#37769)	2026-08-20 20:24:49 -07:00
test_ui_session_utils.py	fix(mcp): deny the interactive dcr_bridge authorize for a user without server access (#37865)	2026-08-21 12:27:00 -07:00
test_utils.py	fix(mcp): drop caller host and configured upstream headers from logged metadata (#36901)	2026-08-14 17:21:07 -07:00