feat(guardrails): MCPJWTSigner - complete zero trust MCP JWT signing (FR-5/9/10/12/13/14/15) by ishaan-jaff · Pull Request #23912 · BerriAI/litellm

Allow pre_mcp_call guardrail hooks to mutate outbound MCP headers

noahnistler

committed

Enhance MCPServerManager to support hook-modified arguments and extra headers. Update tests to validate argument mutation and header injection behavior, including warnings for OpenAPI-backed server…

noahnistler

committed

Refactor MCPServerManager to raise HTTPException for extra headers in OpenAPI-backed servers. Update tests to reflect this change, ensuring proper exception handling instead of logging warnings.

noahnistler

committed

Allow pre_mcp_call guardrail hooks to mutate outbound MCP headers

noahnistler

authored and

ishaan-jaff

committed

Enhance MCPServerManager to support hook-modified arguments and extra headers. Update tests to validate argument mutation and header injection behavior, including warnings for OpenAPI-backed server…

noahnistler

authored and

ishaan-jaff

committed

Refactor MCPServerManager to raise HTTPException for extra headers in OpenAPI-backed servers. Update tests to reflect this change, ensuring proper exception handling instead of logging warnings.

noahnistler

authored and

ishaan-jaff

committed

feat(guardrails): add MCPJWTSigner built-in guardrail for zero trust MCP auth

ishaan-jaff

committed

Update MCPServerManager to raise HTTPException with status code 400 for extra headers in OpenAPI-backed servers. Adjust tests to verify the correct status code and exception message.

noahnistler

committed

fix: address P1 issues in MCPJWTSigner

ishaan-jaff

committed

docs: add MCP zero trust auth guide with architecture diagram

ishaan-jaff

committed

merge: resolve conflicts from PR #23889

ishaan-jaff

committed

docs: add FastMCP JWT verification guide to zero trust doc

ishaan-jaff

committed

fix: address remaining Greptile review issues (round 2)

ishaan-jaff

committed

fix: address Greptile round 3 feedback

ishaan-jaff

committed

feat(guardrails): MCPJWTSigner - zero trust MCP JWT signing with full FR parity

ishaan-jaff

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(guardrails): MCPJWTSigner - complete zero trust MCP JWT signing (FR-5/9/10/12/13/14/15)#23912

feat(guardrails): MCPJWTSigner - complete zero trust MCP JWT signing (FR-5/9/10/12/13/14/15)#23912
ishaan-jaff wants to merge 15 commits intomainfrom
worktree-soft-roaming-stream

Commits on Mar 17, 2026

Allow pre_mcp_call guardrail hooks to mutate outbound MCP headers

Enhance MCPServerManager to support hook-modified arguments and extra headers. Update tests to validate argument mutation and header injection behavior, including warnings for OpenAPI-backed server…

Refactor MCPServerManager to raise HTTPException for extra headers in OpenAPI-backed servers. Update tests to reflect this change, ensuring proper exception handling instead of logging warnings.

Allow pre_mcp_call guardrail hooks to mutate outbound MCP headers

Enhance MCPServerManager to support hook-modified arguments and extra headers. Update tests to validate argument mutation and header injection behavior, including warnings for OpenAPI-backed server…

Refactor MCPServerManager to raise HTTPException for extra headers in OpenAPI-backed servers. Update tests to reflect this change, ensuring proper exception handling instead of logging warnings.

feat(guardrails): add MCPJWTSigner built-in guardrail for zero trust MCP auth

Update MCPServerManager to raise HTTPException with status code 400 for extra headers in OpenAPI-backed servers. Adjust tests to verify the correct status code and exception message.

fix: address P1 issues in MCPJWTSigner

docs: add MCP zero trust auth guide with architecture diagram

merge: resolve conflicts from PR #23889

docs: add FastMCP JWT verification guide to zero trust doc

fix: address remaining Greptile review issues (round 2)

fix: address Greptile round 3 feedback

feat(guardrails): MCPJWTSigner - zero trust MCP JWT signing with full FR parity