litellm/tests/test_litellm/proxy/agent_endpoints/auth
yassin 82eef2fcca fix(proxy): scope agent permissions to invoking caller
An agent key that echoes the x-litellm-user-id / x-litellm-team-id headers
forwarded by /a2a is capped at that user's and team's models, MCP servers
and agents, on top of its own grants and access group ceiling. The echoed
ids only narrow, and nested A2A hops forward the original human caller

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-09-21 22:32:32 +00:00
..
__init__.py [Feat] Agent Access Control - Enforce Allowed agents by key, team + add agent access groups on backend (#17502) 2025-12-04 16:31:00 -08:00
test_agent_access_groups.py refactor(agents): resolve attached access groups from the agent registry instead of the DB on the request path 2026-09-17 20:51:04 +00:00
test_agent_caller.py fix(proxy): scope agent permissions to invoking caller 2026-09-21 22:32:32 +00:00
test_agent_permission_handler.py fix(proxy): scope agent permissions to invoking caller 2026-09-21 22:32:32 +00:00