feat(mcp): support stateless and stateful clients via session-id routing - #26857

Merged

mateo-berri merged 48 commits into

litellm_internal_stagingfrom

litellm_fix_stateful_statless_mcp

May 30, 2026

Commits on Apr 30, 2026

Commits on May 2, 2026

Merge pull request #27037 from BerriAI/litellm_internal_staging
Sameerlite
authored
6d13264

Commits on May 5, 2026

Fix MCP stateful routing edge cases
cursoragent
committed
cf986ff
Fix stateful MCP auth context refresh
cursoragent
committed
17c34f6
Fix MCP stateful session cleanup
cursoragent
committed
6ea4046
fix(mcp): bind stateful sessions to creator and reject hijacks
mateo-berri
committed
8912feb
fix(mcp): serialize concurrent requests on same stateful session
mateo-berri
committed
50931e4
fix(mcp): include OAuth2 bearer in stateful session owner fingerprint
mateo-berri
committed
89f774c
fix(mcp): don't hold stateful session lock for streaming GETs
mateo-berri
committed
979a061
Merge remote-tracking branch 'origin/litellm_internal_staging' into litellm_fix_stateful_statless_mcp
mateo-berri
committed
cda5b45
Merge remote-tracking branch 'origin/litellm_internal_staging' into litellm_fix_stateful_statless_mcp

cursoragent
and
mateo-berri
committed
3717a58
fix(mcp): allow None user_api_key_auth in MCPAuthenticatedUser

cursoragent
and
mateo-berri
committed
79580aa
style: replace with new alias
mateo-berri
committed
356b8af

Commits on May 6, 2026

fix(mcp): fall back to client_ip in stateful session owner fingerprint

cursoragent
and
mateo-berri
committed
ea0a12f
Fix active stateful MCP session cleanup
cursoragent
committed
6cd7bb4
test(mcp): cancel leaked stateful auth-context cleanup task

cursoragent
and
mateo-berri
committed
e5c458d

Commits on May 11, 2026

Fix stateful MCP session fingerprinting
cursoragent
committed
33425cb
Hash MCP session user owner fingerprints
cursoragent
committed
c6a41a5
Fix stale MCP session DELETE cleanup
cursoragent
committed
a40e054
Merge pull request #27650 from BerriAI/litellm_internal_staging
Sameerlite
authored
ea432f2
fix(mcp): harden owner fingerprint hashing for non-str api keys

Sameerlite
and
cursoragent
committed
342adcd
Fix MCP stateful cleanup loop resilience
cursoragent
committed
f71c9f7
Fix stateful MCP initialize auth capture
cursoragent
committed
ac6986b
fix(mcp): drop orphan per-session lock when auth context absent

cursoragent
and
mateo-berri
committed
8125c50
chore(mcp): trim verbose comment on lock cleanup

cursoragent
and
mateo-berri
committed
70b1cc0
Fix stateful MCP delete failure tracking
cursoragent
committed
24c55fb

Commits on May 13, 2026

fix test
Sameerlite
committed
9d60219
fix(mcp): cap routing-peek body size to bound pre-dispatch memory
Sameerlite
committed
7dbeb65
test: replace dall-e-3 with gpt-image-1 in health check and router tests (#27813)

yuneng-berri
authored and
claude
committed
28d0a0e
fix(tests): drop dall-e-only test classes; route live image tests via gpt-image-1

yuneng-berri
authored and
claude
committed
dd4af19
Fix MCP initialize session active tracking

cursoragent
and
yassin-berriai
committed
eaf99ed
Merge remote-tracking branch 'origin/litellm_internal_staging' into litellm_fix_stateful_statless_mcp
claude
committed
225c11c
Fix MCP reinitialize session tracking

cursoragent
and
yassin-berriai
committed
897aaa5
Fix MCP reinitialize auth context aliasing

cursoragent
and
yassin-berriai
committed
6ee5907
Merge branch 'litellm_internal_staging' into litellm_fix_stateful_statless_mcp
mateo-berri
committed
38af29f
Apply black formatting after merge
mateo-berri
committed
929efed
Run owner-binding 403 before consuming POST body
mateo-berri
committed
6f96095
Harden MCP routing peek bound and stateful purge race
mateo-berri
committed
4b3521e
Remove inadvertently committed Next.js build artifacts
mateo-berri
committed
78d04f6
Run owner check before stale MCP session cleanup
mateo-berri
committed
ca47179

Commits on May 14, 2026

fix(mcp): reverse cleanup ordering to terminate transport before clearing owner

cursoragent
and
mateo-berri
committed
57a3c7a

Commits on May 30, 2026

test(mcp): fully reset stateful session tracking in auth-context refresh test
mateo-berri
committed
dde7126
fix(mcp): cap concurrent stateful sessions per caller to bound memory

mateo-berri
authored and
claude
committed
5117a10
Merge branch 'litellm_internal_staging' into litellm_fix_stateful_statless_mcp
mateo-berri
committed
28f8cac