fix(mcp): discover missing OAuth scopes and token_url when authorization_url is set manually - #33317

Merged

tin-berri merged 6 commits into

litellm_internal_stagingfrom

litellm_mcp_field_granular_oauth_discovery

Jul 15, 2026

Commits on Jul 15, 2026

fix(mcp): discover missing OAuth scopes and token_url when authorization_url is set manually
tin-berri
committed
66f012a
fix(mcp): reject discovered token endpoints uncorroborated by the manual authorization_url
tin-berri
committed
a81c6ce
fix(mcp): enforce the OAuth endpoint trust rule at carry-forward too, elide default port
tin-berri
committed
447d50f
fix(mcp): bound pinned-config discovery to the corroborated authorization server, scopes included
tin-berri
committed
8650f6c
fix(mcp): normalize blank OAuth endpoint fields to None at build entry points
tin-berri
committed
feedab2
fix(mcp): keep scope selection resource-driven, not authorization-server-driven
tin-berri
committed
e4a6516