[internal copy of #28008] Support MCP OAuth passthrough and issuer-scoped JWT auth - #28356

Merged

mateo-berri merged 135 commits into

litellm_internal_stagingfrom

litellm_feat/v1.84.0-mcp-gateway-jwt-auth

Jun 2, 2026

Commits on May 9, 2026

fix(proxy): point /metrics 401 at the opt-out flag
yuneng-berri
committed
d8beb7d
Merge pull request #27505 from BerriAI/cherry-pick-metrics-optout-hint-rc2
yuneng-berri
authored
7e0347c
fix(proxy): bound budget reservation per request instead of pinning to remaining headroom
yuneng-berri
committed
a0b2811
fix(proxy): reserve per-image cost for image-generation requests
yuneng-berri
committed
b347015
fix(proxy): gate image-gen reservation strictly on model mode
yuneng-berri
committed
d50c98d
Merge pull request #27539 from BerriAI/litellm_/budget-reservation-rc2-backport
yuneng-berri
authored
18c14d9
build(packaging): relax core runtime pins to ranges
yuneng-berri
committed
82c8cb8
Merge pull request #27545 from BerriAI/litellm_/charming-sammet-8d77c3
yuneng-berri
authored
5bb2803
build(packaging): raise jinja2 floor to 3.1.6
yuneng-berri
committed
a5cc4ff

Commits on May 10, 2026

Merge pull request #27554 from BerriAI/litellm_/charming-sammet-8d77c3
yuneng-berri
authored
188875b

Commits on May 12, 2026

fix(mcp): forward extra_headers for OpenAPI MCP tools

milan-berri
and
cursoragent
committed
38bc921
refactor(mcp): access has_client_credentials on MCPServer directly

milan-berri
and
cursoragent
committed
c31ead8
fix(mcp): static headers win over forwarded headers in OpenAPI MCP

authored and
milan-berri
committed
a1d1906
Merge pull request #27768 from milan-berri/litellm_cherry-pick-27383-onto-1.84.0rc2
yuneng-berri
authored
4046cb1
fix(proxy): always merge caller-supplied tags into request metadata
yuneng-berri
committed
111ee52
docs(proxy): refresh stale comments referencing removed tag strip
yuneng-berri
committed
cd9d312
Merge pull request #27789 from BerriAI/litellm_/wizardly-sammet-94baac
yuneng-berri
authored
74bb525

Commits on May 13, 2026

Commits on May 14, 2026

fix(ui): fetch version + debug flag from /health/readiness/details
yuneng-berri
committed
ab0267d
fix(ui): disable retries on readiness/details + cover token forwarding
yuneng-berri
committed
51ed234
Merge pull request #27899 from BerriAI/backport-pr-27896-into-1.84.0rc2
yuneng-berri
authored
305875f
chore: update Next.js build artifacts (2026-05-14 03:52 UTC, node v20.20.2)
yuneng-berri
committed
02c5e1c
Merge pull request #27901 from BerriAI/yj_build_may13
yuneng-berri
authored
50030e3
Merge pull request #27898 from stuxf/chore/banned-params-extra-body-cover
yuneng-berri
committed
974f5cd
Merge pull request #27801 from stuxf/chore/get-instance-fn-runtime-s3-gate
yuneng-berri
committed
3dd763d
Merge pull request #27902 from BerriAI/litellm_/eager-euler-fd3639
yuneng-berri
authored
08ea016
fix: block client-side pricing injection via request body

authored and
yuneng-berri
committed
fdb55ab
fix: block SSRF fields in RAG ingest vector_store config

authored and
yuneng-berri
committed
b2c93b1
fix: harden /key/update authorization checks (#27878)

authored and
yuneng-berri
committed
d35d2a7
Merge pull request #27903 from BerriAI/backport/27892-litellm_1.84.0rc2
yuneng-berri
authored
087003e
Merge remote-tracking branch 'origin/litellm_1.84.0rc2' into backport/27878-litellm_1.84.0rc2
yuneng-berri
committed
fe18665
Merge pull request #27904 from BerriAI/backport/27878-litellm_1.84.0rc2
yuneng-berri
authored
321d576
bump: version 0.4.71 → 0.4.72
yuneng-berri
committed
0f741fc
uv lock
yuneng-berri
committed
fcd63b0
Merge pull request #27909 from BerriAI/backport/27908-litellm_1.84.0rc2
yuneng-berri
authored
e1fc955

Commits on May 15, 2026

feat(mcp): support OAuth passthrough discovery
gym-cmd
committed
d0cc1a4
fix(mcp): support OAuth browser auth
gym-cmd
committed
0daeeab
fix(mcp): refine upstream OAuth metadata fallback
gym-cmd
committed
8e864f3
feat(proxy): support issuer-scoped JWT auth
gym-cmd
committed
da24c89
fix(mcp): validate oauth callback redirect sink
gym-cmd
committed
c279f4e
feat(proxy): support issuer-scoped JWT auth
gym-cmd
committed
1d731af
test(mcp): align trusted proxy fixtures
gym-cmd
committed
dee5d55
style(mcp): satisfy black formatting
gym-cmd
committed
dfb1e33
chore(ui): bump next to 16.2.6
gym-cmd
committed
b290416
fix(mcp): address oauth passthrough review findings
gym-cmd
committed
8ca2f14
test(mcp): split oauth passthrough regressions
gym-cmd
committed
6079a5f
fix(interactions): align openapi response fields
gym-cmd
committed
409a005

Commits on May 16, 2026

Commits on May 20, 2026

fix(mcp): forward Authorization in pass-through when x-litellm-api-key is admission

authored and
gym-cmd
committed
f6359cb
fix(interactions): align status enum with openapi spec
gym-cmd
committed
216e055
fix(mcp,jwt): address greptile review concerns
claude
committed
806b8be
test: replace dall-e-3 with gpt-image-1 in health check and router tests (#27813)

yuneng-berri
authored and
claude
committed
a119324
fix(tests): drop dall-e-only test classes; route live image tests via gpt-image-1

yuneng-berri
authored and
claude
committed
93d3ed7
test(fireworks): replace deprecated llama-v3p3-70b-instruct model

yuneng-berri
authored and
claude
committed
a0b61f6
test(fireworks): mock remaining live smoke tests

yuneng-berri
authored and
claude
committed
76700e7
fix(tests): replace shut-down gpt-4o-audio-preview with gpt-audio-1.5 (#28281)

yuneng-berri
authored and
claude
committed
c65e598
fix(tests): migrate realtime + rerank tests off shut-down upstream models (#28191)

yuneng-berri
authored and
claude
committed
37845ac
fix(model_prices): register mistral/ministral-8b-2512
claude
committed
76c704b
fix(mcp,auth): address greptile review concerns
claude
committed
298936f
Merge branch 'litellm_internal_staging' into litellm_feat/v1.84.0-mcp-gateway-jwt-auth
claude
committed
d42a66a
Merge remote-tracking branch 'origin/litellm_feat/v1.84.0-mcp-gateway-jwt-auth' into litellm_feat/v1.84.0-mcp-gateway-jwt-auth
claude
committed
fc31a07
fix(tests): backfill local model_cost into remote-fetched map
claude
committed
087a4da
fix(mcp,jwt): address greptile concurrency and code-quality concerns
claude
committed
22e9064
Merge remote-tracking branch 'upstream/litellm_internal_staging' into feat/v1.84.0-mcp-gateway-jwt-auth-public
gym-cmd
committed
b4df1a9
fix(jwt,mcp): fall back to global JWKS on unknown issuer; prune fetch locks
claude
committed
488fcc2
fix(mcp,auth): restore client_ip in oauth2 target check, drop from delegate check
claude
committed
1e5053a
fix(mcp): respect client ip for delegated auth
gym-cmd
committed
eae390b
fix(auth): address remaining greptile style findings
claude
committed
a6492bf
Merge branch 'litellm_internal_staging' into litellm_feat/v1.84.0-mcp-gateway-jwt-auth
claude
committed
6f82537
fix(jwt): strip internal _litellm_* claims in global JWKS auth path

cursoragent
and
yassin-berriai
committed
5d8f74f
fix(mcp): surface MCPUpstreamAuthError as 401 in SSE/HTTP transport handlers

cursoragent
and
yassin-berriai
committed
a86f6e7
fix(mcp): add upstream auth pre-flight in SSE handler
claude
committed
326c6bb
fix(mcp): tighten cold-start bypass against CSV paths + dedupe upstream auth probe

cursoragent
and
yassin-berriai
committed
78cb412
fix(mcp,tests): sync stubs and cold-start assertions with delegate-check
claude
committed
ee38ba1
fix(mcp): correct passthrough probe 401 + slashed-name cold start parser

cursoragent
and
yassin-berriai
committed
f0eb54e
style(mcp): format discoverable endpoints
gym-cmd
committed
96e4de3
refactor(mcp): dedupe MCPUpstreamAuthError->HTTPException + thread client_ip into delegate-auth gate

cursoragent
and
yassin-berriai
committed
d1d9ff0
fix(mcp): handle passthrough OAuth metadata and startup auth errors

cursoragent
and
yassin-berriai
committed
719adfd
fix(mcp): restrict passthrough probe challenge to OAuth passthrough servers

cursoragent
and
yassin-berriai
committed
7ba7815
test(proxy): cover issuer-scoped JWT auth
gym-cmd
committed
2636bbc
fix(mcp): use resource metadata for passthrough reauth
gym-cmd
committed
0447ba6

Commits on May 21, 2026

Commits on May 26, 2026

Commits on May 30, 2026

revert(docker): drop unrelated Wolfi bump and apk retry loop from MCP/JWT PR
mateo-berri
committed
9288f83

Commits on Jun 2, 2026