Yuneng Jiang 91f6661b37 [Fix] Align MCP OAuth proxy endpoints with per-server access policy ...

Bring `/server/oauth/{server_id}/authorize`, `/token`, and `/register`
in line with `fetch_mcp_server`: the helper that resolves the server now
also applies the per-caller access policy. Admin-view callers are
unrestricted; non-admins must have the server in their allowed-servers
set; servers resolved from the admin-only `/server/oauth/session`
temporary cache reject non-admins.

2026-04-25 12:39:44 -07:00

..

_experimental/mcp_server

Merge pull request #26274 from stuxf/fix/mcp-byok-oauth-auth

2026-04-24 13:05:44 -07:00

agent_endpoints

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

anthropic_endpoints

test: isolate proxy master_key/prisma_client module globals between tests

2026-04-23 15:31:16 -07:00

auth

fix: isolate per-fetch HTTPException in centralized common_checks gate

2026-04-25 09:58:23 -07:00

client

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

common_utils

fix(budget_reset): use raw SQL for IS NOT NULL filter on Json? columns

2026-04-23 12:26:25 -07:00

db

Merge pull request #26195 from BerriAI/litellm_team_member_total_spend

2026-04-22 18:20:16 -07:00

discovery_endpoints

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

experimental/mcp_server

…

google_endpoints

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

guardrails

Merge remote-tracking branch 'origin/litellm_internal_staging' into litellm_yj_apr23

2026-04-25 09:47:47 -07:00

health_endpoints

fix: /health/readiness 503 loop when DB is unreachable (#26134)

2026-04-20 15:29:43 -07:00

hooks

Merge branch 'litellm_internal_staging' into litellm_project_rate_limiting

2026-04-17 19:10:06 -07:00

image_endpoints

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

management_endpoints

[Fix] Align MCP OAuth proxy endpoints with per-server access policy

2026-04-25 12:39:44 -07:00

management_helpers

fix: give each team member an independent budget instead of sharing the team default

2026-04-21 17:58:50 -07:00

memory

feat(proxy): add /v1/memory CRUD endpoints (#26218)

2026-04-24 18:38:07 -07:00

middleware

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

openai_files_endpoint

Merge remote-tracking branch 'origin/litellm_internal_staging' into litellm_yj_apr17

2026-04-17 17:36:40 -07:00

pass_through_endpoints

fix(passthrough): strip Server/Date/Connection from upstream response headers

2026-04-24 16:56:44 -07:00

policy_engine

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

prompts

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

public_endpoints

Merge remote-tracking branch 'origin/litellm_internal_staging' into litellm_/wonderful-bouman

2026-04-17 21:32:09 -07:00

rag_endpoints

tests and route permissions (#21508)

2026-02-18 16:58:38 -08:00

realtime_endpoints

test: isolate proxy master_key/prisma_client module globals between tests

2026-04-23 15:31:16 -07:00

response_api_endpoints

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

spend_tracking

Scope NULLS LAST to ttft_ms only

2026-04-24 22:52:04 -07:00

test_configs

…

ui_crud_endpoints

Merge pull request #26442 from BerriAI/litellm_feat-restrict-org-admin-permissions

2026-04-25 08:50:26 -07:00

vector_store_endpoints

fix(proxy): respect object-level permissions for managed vector store endpoints (#26351)

2026-04-24 09:21:13 -07:00

__init__.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

conftest.py

test: isolate proxy master_key/prisma_client module globals between tests

2026-04-23 15:31:16 -07:00

test_aiohttp_cleanup_closed.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_aiohttp_session_recovery.py

fix: use AsyncMock for concurrent test consistency

2026-03-18 00:54:23 +00:00

test_api_key_masking_in_errors.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_audio_speech_prometheus_hooks.py

fix req changes

2026-02-28 21:32:57 +05:30

test_batch_expiry.py

fix(proxy): improve team expiry enforcement validation

2026-03-03 17:29:39 -08:00

test_batch_metadata_none_fix.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_caching_routes.py

…

test_chat_completion_metadata.py

…

test_common_request_processing.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_cors_config.py

refactor: extract _get_cors_config() for testability, fix no-op CORS tests

2026-04-11 22:24:04 +05:30

test_custom_proxy.py

…

test_empty_model_list.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_enforce_user_param.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_fallback_management_endpoints.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_fastapi_offline_routes.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_health_check_functions.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_health_check_max_tokens.py

fix(proxy): avoid duplicate reasoning capability lookup

2026-04-17 12:49:31 +05:30

test_litellm_pre_call_utils.py

fix(proxy): preserve anthropic_messages call type for /v1/messages logging

2026-04-22 18:32:33 +05:30

test_max_budget_env_var.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_model_dump_with_preserved_fields.py

Fix_mapped tests part 2

2026-02-26 12:43:39 +05:30

test_model_id_header_propagation.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_model_info_default_limits.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_model_level_guardrails.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_openapi_schema_validation.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_prometheus_cleanup.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_proxy_cli.py

[Test] Fix setup_database call-signature assertions for v2 flag

2026-04-21 14:45:29 -07:00

test_proxy_server.py

Fix bug that bypasses per-team member budget limit

2026-04-22 10:41:13 -07:00

test_proxy_types.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_proxy_utils.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_pyroscope.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_response_model_sanitization.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_route_a2a_models.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_route_llm_request.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_shared_health_check.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_spend_log_cleanup.py

fix: harden CORS, create_views exception handling, and spend log cleanup loop

2026-04-11 18:58:04 +05:30

test_swagger_chat_completions.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_team_member_update.py

…

test_team_org_move.py

fix(team_endpoints): auto-add SSO team members to org on move (proxy admin only) (#26377)

2026-04-24 08:36:25 -07:00

test_tools_allowlist_enforcement.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_update_llm_router_resilience.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_utils.py

add NO_OPENAPI env var to disable /openapi.json endpoint (#25547)

2026-04-14 23:37:49 +05:30