Yassin Kortam f3639a6fb3 fix(mcp): let a salt-key-orphaned OAuth credential be replaced by re-authorization (#37672) ... store_user_oauth_credential refused to overwrite any existing row that did not decode as an OAuth2 payload, which conflated two states: a live BYOK secret that reads back as plaintext, and ciphertext written under a LITELLM_SALT_KEY the proxy no longer holds. The second is unrecoverable by any caller, so refusing preserved nothing and instead wedged the user out of the OAuth flow permanently, since re-authorizing is their only recovery. The guard now raises only when the existing value is genuinely readable. An undecryptable row is logged and replaced by the newly authorized token. Both read paths were equally silent: get_user_oauth_credential and list_user_oauth_credentials (which backs the bulk prefetch) each dropped an undecryptable row indistinguishably from "user never authorized", so an operator saw an upstream 401 and no hint that a credential had failed to decrypt. Both now warn with the user and server ids, never the stored value.		2026-08-20 14:11:17 -07:00
..
auth	feat(mcp): scope gateway session bearers to the RFC 8707 resource (#35045)	2026-08-15 14:56:34 -07:00
faults	ci: lint the test tree for undefined names and fix all 30 (#37671)	2026-08-20 13:30:34 -07:00
guardrail_translation	feat(guardrails): scan and mask MCP tool results via post_mcp_call (#35155)	2026-07-30 14:10:26 -07:00
outbound_credentials	feat(proxy): native CLI login with OAuth authorization code + PKCE	2026-08-20 04:10:10 -07:00
conftest.py	test(mcp): isolate MCP discovery tests from a leaked SERVER_ROOT_PATH	2026-07-18 18:45:18 -07:00
test_byok_oauth_endpoints.py	feat(mcp): allow native MCP OAuth support for cursor (#28327)	2026-05-20 15:28:44 -07:00
test_callback_oauth_error_responses.py	Litellm oss staging 250526 (#28770)	2026-05-26 11:57:39 -07:00
test_db_credentials.py	fix(mcp): let a salt-key-orphaned OAuth credential be replaced by re-authorization (#37672)	2026-08-20 14:11:17 -07:00
test_discoverable_endpoints.py	ci: lint the test tree for undefined names and fix all 30 (#37671)	2026-08-20 13:30:34 -07:00
test_gateway_dcr_flow.py	fix(mcp): answer 503 when a refresh-token burn cannot be recorded	2026-08-20 07:56:38 -07:00
test_is_tool_name_prefixed.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_jwt_mcp_enforcement.py	fix(mcp): resolve team.access_group_ids → MCP servers (#28997)	2026-05-27 12:36:50 -07:00
test_jwt_mcp_simple.py	fix(mcp): resolve team.access_group_ids → MCP servers (#28997)	2026-05-27 12:36:50 -07:00
test_mcp_block_recording.py	fix(guardrails): record MCP tool guardrail evaluations and blocks in usage monitor	2026-08-14 17:52:36 -04:00
test_mcp_cost_calculator.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_mcp_custom_fields.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_mcp_debug.py	chore: litellm oss staging (#30968)	2026-06-23 07:31:44 -07:00
test_mcp_discovery.py	fix(mcp): default Linear MCP registry entry to streamable HTTP (#30396)	2026-06-13 14:45:47 -07:00
test_mcp_elicitation_handler.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_env_vars.py	fix(mcp): drop orphaned per-user credential rows when an MCP server is deleted (#30141)	2026-06-10 15:56:58 -07:00
test_mcp_guardrail_usage_monitor.py	fix(guardrails): record MCP tool guardrail evaluations and blocks in usage monitor	2026-08-14 17:52:36 -04:00
test_mcp_header_alias_utils.py	feat(mcp): Add tool call and tool list support via UI for Oauth mcps (#28454)	2026-05-22 09:04:04 -07:00
test_mcp_hook_extra_headers.py	fix(mcp): expose client HTTP headers to logging callbacks and hooks (#36724)	2026-08-13 20:07:16 -07:00
test_mcp_max_concurrent_requests.py	feat(ui): expose MCP max_concurrent_requests in server create and edit forms (#32397)	2026-07-07 22:47:03 -07:00
test_mcp_metadata_preservation.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_mcp_oauth_passthrough.py	feat(mcp): extend keyless gateway OAuth flow to per-server MCP URL paths (#34856)	2026-07-30 17:40:32 -07:00
test_mcp_oauth_passthrough_cold_start.py	feat(mcp): scope gateway session bearers to the RFC 8707 resource (#35045)	2026-08-15 14:56:34 -07:00
test_mcp_oauth_passthrough_tools.py	Merge origin/litellm_internal_staging into litellm_mcp_walker_consolidation	2026-07-20 16:29:24 -07:00
test_mcp_partial_update.py	fix(mcp): never write discovery results to the row, heal rows a release already stamped, and retry failed discovery with backoff	2026-07-29 17:51:22 -07:00
test_mcp_sampling_completion_flow.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_model_access.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_model_resolution.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_priority_selection.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_request_builder.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_response_conversion.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_sampling_tool_conversion.py	Litellm oss staging 040626 (#29671)	2026-06-04 11:07:20 -07:00
test_mcp_server.py	Merge pull request #37388 from BerriAI/litellm_lit_5718_mcp_tool_bound_to_server	2026-08-18 18:22:00 -07:00
test_mcp_server_identity_env.py	chore: litellm oss 170626 (#30637)	2026-06-17 21:11:12 -07:00
test_mcp_server_manager.py	fix(mcp): stop reporting failed OpenAPI tool calls as successes (#37496)	2026-08-19 14:26:02 -07:00
test_mcp_session_logging.py	Add MCP semantic conventions to otelv2 (#29468)	2026-06-02 11:45:36 -07:00
test_mcp_sigv4_auth.py	fix(mcp): persist config.yaml DCR clients in a server-scoped store	2026-07-17 19:42:32 -07:00
test_mcp_stale_session.py	ci: lint the test tree for undefined names and fix all 30 (#37671)	2026-08-20 13:30:34 -07:00
test_mcp_tool_search.py	refactor(mcp): delete unreachable v1 OBO handler and gate REST OAuth on v2 resolver	2026-07-23 10:41:15 -07:00
test_mcp_toolset_scope.py	fix(mcp): use a toolset row's stored tool name as written	2026-07-24 17:06:08 -07:00
test_oauth2_flow_backfill.py	feat(mcp): startup backfill stamping oauth2_flow on legacy null rows (#32290)	2026-07-06 18:42:08 -07:00
test_oauth2_token_cache.py	feat(mcp): send RFC 8707 resource indicators on upstream OAuth legs	2026-07-24 15:01:38 -07:00
test_oauth_issuer_stamp_backfill.py	fix(mcp): never write discovery results to the row, heal rows a release already stamped, and retry failed discovery with backoff	2026-07-29 17:51:22 -07:00
test_openapi_to_mcp_generator.py	fix(mcp): stop reporting failed OpenAPI tool calls as successes (#37496)	2026-08-19 14:26:02 -07:00
test_openapi_tool_auth.py	fix(mcp): stop reporting failed OpenAPI tool calls as successes (#37496)	2026-08-19 14:26:02 -07:00
test_proxy_api_credentials.py	fix(proxy): refuse a teamless native-client grant for a user who has teams	2026-08-20 05:37:35 -07:00
test_rest_endpoints.py	ci: lint the test tree for undefined names and fix all 30 (#37671)	2026-08-20 13:30:34 -07:00
test_semantic_tool_filter.py	ci: lint the test tree for undefined names and fix all 30 (#37671)	2026-08-20 13:30:34 -07:00
test_short_mcp_tool_prefix.py	fix(mcp): recover the tool-name prefix boundary from registered prefixes	2026-07-30 22:13:09 -07:00
test_ui_session_utils.py	fix(mcp): annotate connected-app reachability on the gateway connect page (#34867)	2026-07-31 05:38:54 +00:00
test_utils.py	fix(mcp): drop caller host and configured upstream headers from logged metadata (#36901)	2026-08-14 17:21:07 -07:00