feat(mcp): admit dcr_bridge oauth_delegate clients via a single envelope bearer - #32824

Merged

tin-berri merged 9 commits into

litellm_internal_stagingfrom

litellm_lit4338_delegate_admission

Jul 11, 2026

Commits on Jul 11, 2026

feat(mcp): admit dcr_bridge oauth_delegate clients via a single envelope bearer
tin-berri
committed
46977d6
fix(mcp): admit dcr_bridge envelopes under the live key, not a frozen identity
tin-berri
committed
50cc2c0
fix(mcp): enforce team block and alias-priority token injection on bridge admission
tin-berri
committed
c59f16f
fix(mcp): route bridge admission through the centralized policy gate and mirror the SCIM owner check
tin-berri
committed
9e6d6e5
fix(mcp): import assert_never from typing_extensions for Python 3.10
tin-berri
committed
0e6ed18
fix(mcp): surface real status from bridge admission policy gate instead of flattening to 401
tin-berri
committed
ea64ef7
fix(mcp): map a DB outage during bridge key reload to a retryable 503
tin-berri
committed
f5f03cb
fix(mcp): run the route gate on bridge admission so allowed_routes are enforced
tin-berri
committed
688f535
fix(mcp): run proxy-wide pre-DB gates on bridge envelope admission
tin-berri
committed
1c3c1af