mateo-berri 659eb0462e fix(mcp): deny every zero-resolution scoped request uniformly and persist agent MCP toolsets from the UI ... Any scoped MCP request (/mcp/<name> path or x-mcp-servers header) that resolves to zero allowed servers now returns one generic 403, so unknown, unauthorized, and access-group names are indistinguishable and the error cannot be used to enumerate servers. The agent-attributed variant reruns the same scope resolver with the agent binding stripped and fires only when that rerun resolves, naming the vetoed server or access group and both fix paths AgentObjectPermission now declares mcp_toolsets so PATCH /v1/agents keeps it, and the agent edit form round-trips toolsets alongside servers and access groups instead of dropping them on save. The two scope-resolver params only iterate their names, so they take Sequence[str] and the LIT001 budget ratchets down by the two annotations this widens		2026-09-01 18:37:23 -07:00
..
_experimental/mcp_server	fix(mcp): deny every zero-resolution scoped request uniformly and persist agent MCP toolsets from the UI	2026-09-01 18:37:23 -07:00
a2a	fix(a2a): reject malformed protocolVersion suffixes while keeping semver prereleases	2026-07-21 13:24:58 -07:00
agent_endpoints	fix(a2a): merge fresh agent vectors into the live cache and drop entries of another dimension	2026-08-27 20:58:14 -07:00
analytics_endpoints	feat(ui): add error-code drilldown for failed requests on caching page	2026-08-24 15:45:45 -07:00
anthropic_endpoints	fix(anthropic_endpoints): serialize dict-detail HTTPExceptions on /v1/messages like sibling surfaces	2026-08-29 00:48:14 -07:00
auth	fix(auth): quiet malformed virtual key rejections to stdout (#38838)	2026-08-31 18:19:40 -07:00
batches_endpoints	test: add regression coverage for twelve closed issues (#37974)	2026-08-22 22:24:05 +00:00
client	fix(cli): keep an existing ENABLE_TOOL_SEARCH value	2026-08-31 06:00:45 +00:00
common_utils	Merge branch 'litellm_window_spend_schema' into litellm_window_spend_writer	2026-08-29 16:23:45 -07:00
config_resolvers	feat(proxy): add SAML 2.0 SSO for the admin UI (#31429)	2026-07-24 12:51:28 -07:00
credential_endpoints	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
db	fix(proxy): keep persisted spend another pod has not incremented in the window seed	2026-08-31 15:49:03 -07:00
discovery_endpoints	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
enterprise_billing	feat(proxy): push-based OTLP billable-request metering for enterprise deployments (#31592)	2026-07-15 12:12:52 -07:00
experimental/mcp_server	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
fine_tuning_endpoints	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
google_endpoints	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
guardrails	Merge remote-tracking branch 'origin/litellm_internal_staging' into litellm_fix_bedrock_buffered_responses_stream	2026-09-01 14:11:29 -07:00
health_endpoints	fix(health): honor allow_requests_on_db_unavailable in readiness probe (#37640)	2026-08-29 10:17:12 -07:00
hooks	refactor(proxy): bound the budget window seed by time instead of request ids	2026-08-29 17:13:26 -07:00
image_endpoints	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
list_api	feat(proxy): add paginated GET /public/v1/model_hub (#38636)	2026-08-28 10:02:59 -07:00
logging_endpoints
management_endpoints	fix: keep litellm_credential_name from LiteLLM Params JSON and gate stored credential attach to proxy admins (#39047)	2026-09-01 13:46:18 -07:00
management_helpers	test: drop litellm-internal patches from the cross-region alias test (TQ008)	2026-09-01 08:23:26 -07:00
memory	fix(memory): return 404 when the memory row vanishes before delete	2026-08-25 16:20:17 -07:00
middleware	feat(proxy): add Amazon Comprehend Medical passthrough provider	2026-08-17 15:44:06 -07:00
ocr_endpoints	fix(ocr): validate body req_format in the proxy endpoint and run its tests in CI	2026-08-17 18:29:35 +00:00
openai_files_endpoint	fix(bedrock): map real batch record counts and guard zero-count retire	2026-08-29 01:05:36 -07:00
pass_through_endpoints	fix(proxy): wire team-level logging callbacks into passthrough endpoints (#38979)	2026-09-01 02:38:39 +00:00
policy_engine	fix(policy_engine): restore request guardrails list after pipeline allow	2026-08-31 16:38:44 -07:00
prompts	fix(prompts): propagate prompt deletes to every worker and pod	2026-08-26 18:01:08 -07:00
proxy_server	Merge branch 'litellm_internal_staging' into litellm_fix_supported_openai_params_router_alias	2026-09-01 12:57:36 -07:00
public_endpoints	feat(proxy): add paginated GET /public/v1/model_hub (#38636)	2026-08-28 10:02:59 -07:00
rag_endpoints	feat(proxy): enforce vector-store upload security controls on /v1/rag/ingest	2026-08-24 12:41:15 -07:00
realtime_endpoints	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
rerank_endpoints	fix(rerank): emit latency and cost headers on /rerank (#35419)	2026-08-25 15:54:25 -07:00
response_api_endpoints	fix(count_tokens): preserve image inputs when counting Responses API tokens	2026-08-31 12:43:17 -07:00
shutdown
spend_tracking	merge: absorb litellm_internal_staging; drop python duplicate-issues closer fix superseded by ts rewrite	2026-09-01 09:18:31 +00:00
test_configs
types_utils	fix(proxy): resolve router_settings.plugins dotted paths and load plugins from installed packages (#33644)	2026-07-17 11:23:18 -07:00
ui_crud_endpoints	Merge remote-tracking branch 'origin/litellm_internal_staging' into litellm_decrease_anys_opus5_round2	2026-08-25 16:17:29 -07:00
utils	fix(proxy): deliver budget alerts on webhook-only alerting and accept ALERTING_WEBHOOK_URL (#38441)	2026-08-31 09:22:36 -07:00
vector_store_endpoints	refactor(repositories): type prisma table access with one generic protocol	2026-08-25 12:14:17 +00:00
vector_store_files_endpoints	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
video_endpoints	fix(videos): forward uploaded source file on /v1/videos/edits to the provider	2026-08-24 15:34:21 -07:00
__init__.py
conftest.py	test(proxy): keep a leaked llm_router out of the next test in the worker	2026-08-20 23:19:17 -07:00
test__types.py	test(proxy): pin the request-validation contracts in proxy/_types.py	2026-08-25 23:29:26 -07:00
test_aiohttp_cleanup_closed.py
test_aiohttp_session_recovery.py
test_api_key_masking_in_errors.py
test_audio_speech_prometheus_hooks.py	fix(proxy): match /v1/audio/speech content-type to the returned audio format	2026-08-29 13:44:43 -07:00
test_batch_expiry.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_batch_metadata_none_fix.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_batch_retrieve_bedrock.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_batch_x_litellm_model_encoding.py	test(proxy): give the x-litellm-model fallback test deterministic openai env creds	2026-08-17 12:42:57 -07:00
test_blocked_response_usage.py	fix(responses_api): map bridged chat usage on guardrail-blocked replies	2026-08-14 17:04:27 -07:00
test_budget_reservation.py	test(budgets): clear the test-quality violations this branch added	2026-08-29 14:44:00 -07:00
test_caching_routes.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_chat_completion_metadata.py
test_claude_code_marketplace.py	test: run the 30 test files stranded in the second mirror (#37595)	2026-08-20 10:59:43 -07:00
test_common_request_processing.py	Merge remote-tracking branch 'origin/litellm_internal_staging' into litellm_gigachat_passthrough_25886	2026-08-31 13:16:41 -07:00
test_component_allowlists.py	feat(proxy): authenticate to Azure Postgres with Microsoft Entra ID tokens	2026-08-20 11:50:16 -07:00
test_conftest.py	test(proxy): stop monkeypatch.undo re-planting fixture-mocked prisma_client	2026-08-13 20:11:06 -07:00
test_cors_config.py
test_custom_proxy.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_dynamic_mcp_route.py	fix(proxy): serve aggregate MCP endpoint on bare /mcp instead of 307-redirecting (#34845)	2026-08-14 17:04:32 -07:00
test_empty_model_list.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_enforce_user_param.py	test: require a match= on broad pytest.raises, and drop duplicate parametrize cases (#37769)	2026-08-20 20:24:49 -07:00
test_fallback_management_endpoints.py
test_fastapi_offline_routes.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_filter_models_by_team_access_group.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_health_check_functions.py	feat(health): opt-in model-group allowlist for background health checks and health-check routing (#38539)	2026-08-27 12:25:56 -07:00
test_health_check_max_tokens.py	fix(proxy): derive auto-router health from its underlying models (#38174)	2026-08-26 16:41:54 -07:00
test_init_litellm_callbacks.py	test: run the 30 test files stranded in the second mirror (#37595)	2026-08-20 10:59:43 -07:00
test_langfuse_passthrough_security.py
test_lazy_openapi_snapshot.py	refactor(proxy): type the snapshot fragments and wrap a long test line	2026-08-26 14:39:51 -07:00
test_litellm_pre_call_utils.py	Merge pull request #38784 from BerriAI/litellm_model_access_group_budgets	2026-08-29 16:06:54 -07:00
test_max_budget_env_var.py
test_mcp_asgi_response.py
test_model_based_routing_files_batches.py
test_model_deprecations_endpoint.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_model_dump_with_preserved_fields.py
test_model_id_header_propagation.py	feat(proxy): add x-litellm-model-name response header with deployment model string (#33698)	2026-07-17 20:29:42 -07:00
test_model_info_default_limits.py
test_model_level_guardrails.py	fix(proxy): apply key/team router_settings.model_group_alias (#35486)	2026-08-03 22:09:47 +00:00
test_model_list_healthy_only.py	feat(proxy): hide unhealthy models from model listings, opt-in	2026-08-26 00:13:52 -07:00
test_modify_response_streaming_passthrough.py
test_openai_ws_passthrough_routes.py	fix(proxy): close websocket cleanly when OpenAI credentials are missing	2026-08-16 14:40:37 -07:00
test_openapi_schema_validation.py
test_plugin_routes.py
test_pricing_field_strip.py	fix(proxy): fold litellm_metadata into metadata on chat routes so tag routing sees merged tags	2026-08-29 00:42:43 -07:00
test_prisma_engine_watchdog.py	test: run the 30 test files stranded in the second mirror (#37595)	2026-08-20 10:59:43 -07:00
test_prisma_migration.py	fix(proxy): keep a failed prisma generate from failing the migration entrypoint (#37947)	2026-08-22 11:45:19 -07:00
test_prometheus_cleanup.py
test_provider_url_destination_guard.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_proxy_cli.py	fix(proxy): default max_idle_connection_lifetime to 60s on DB URLs (#39134)	2026-09-01 14:16:51 -07:00
test_proxy_logging_hook_detection.py	fix(guardrails): match deferred stream dispatch shape per stream owner and defer passthrough logging until guardrail eos	2026-08-29 02:23:12 -07:00
test_proxy_server.py	refactor(proxy): bound the budget window seed by time instead of request ids	2026-08-29 17:13:26 -07:00
test_proxy_types.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_proxy_utils.py	fix(proxy): run SMTP send_email off the event loop with a connection timeout (#38473)	2026-08-29 16:05:57 -07:00
test_pyroscope.py
test_read_model_list.py
test_redis_auth_cache_flag.py	test: add six ruff rules that catch tests which cannot fail (#37709)	2026-08-20 14:21:26 -07:00
test_response_model_sanitization.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_route_a2a_models.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_route_llm_request.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_sensitive_route_auth.py
test_shared_health_check.py	fix(proxy): derive auto-router health from its underlying models (#38174)	2026-08-26 16:41:54 -07:00
test_spend_log_cleanup.py	test: require a match= on broad pytest.raises, and drop duplicate parametrize cases (#37769)	2026-08-20 20:24:49 -07:00
test_swagger_chat_completions.py
test_team_member_update.py
test_team_org_move.py	test: require a match= on broad pytest.raises, and drop duplicate parametrize cases (#37769)	2026-08-20 20:24:49 -07:00
test_tools_allowlist_enforcement.py	fix(anthropic): close hybrid tool-name allowlist gap and keep native tools through guardrails	2026-08-26 20:37:11 -07:00
test_update_llm_router_resilience.py	feat(complexity_router): custom classifier plugins via classifier_type 'custom' (#37249)	2026-08-18 14:09:19 -07:00