Tin 65d0dcfb82 fix(mcp): never forward an Authorization header that satisfied admission on the tools preview ... Authorization doubles as the admission fallback when x-litellm-api-key is absent, so a caller who authenticated the preview request that way had their LiteLLM key forwarded to the upstream as the oauth2/client-forwarded token. The preview now forwards Authorization only when the primary admission header is present, which is how the dashboard has always sent it; with no primary header there is no upstream token on the request at all. Applies to oauth2 and both client-forwarded modes; parametrized regression test plus the admission header added to the existing extraction tests to mirror the real UI request shape		2026-07-09 15:02:05 -07:00
..
mcp_server	fix(mcp): never forward an Authorization header that satisfied admission on the tools preview	2026-07-09 15:02:05 -07:00