feat(agents): attach access groups to agents and enforce them for models, MCP servers and agent calls by devin-ai-integration[bot] · Pull Request #41634 · BerriAI/litellm

feat(agents): attach access groups to agents and enforce them for models, MCP servers and agent calls

yassin-berriai

and

devin-ai-integration[bot]

committed

b84f8b6

Merge remote-tracking branch 'origin/main' into litellm_agent_access_groups

yassin-berriai

committed

cf9c8fe

refactor(agents): mark Callable loader aliases for the type discipline gate

yassin-berriai

and

devin-ai-integration[bot]

committed

433c804

style(ui): format add_agent_form test with prettier

yassin-berriai

and

devin-ai-integration[bot]

committed

322262d

test(agents): inject the access group ceiling resolver instead of patching it

yassin-berriai

and

devin-ai-integration[bot]

committed

d743e08

refactor(agents): keep the model listing cap within the type-discipline budget

yassin-berriai

and

devin-ai-integration[bot]

committed

5b04560

fix(agents): evict the cached agent access groups on every agent write and cap the model listing

yassin-berriai

and

devin-ai-integration[bot]

committed

3a86567

refactor(agents): exhaust the agent access match and drop routine comments

yassin-berriai

and

devin-ai-integration[bot]

committed

89330cd

fix(agents): import assert_never from typing_extensions for Python 3.10

yassin-berriai

and

devin-ai-integration[bot]

committed

18c31e6

refactor(agents): resolve attached access groups from the agent registry instead of the DB on the request path

yassin-berriai

and

devin-ai-integration[bot]

committed

1206fa8

fix(agents): return on every branch of the agent access ceiling so CodeQL sees no fall-through

yassin-berriai

and

devin-ai-integration[bot]

committed

7229fc1

refactor(agents): combine key and team agent grants without a fall-through match

yassin-berriai

and

devin-ai-integration[bot]

committed

25729c5

Navigation Menu

Repository navigation

feat(agents): attach access groups to agents and enforce them for models, MCP servers and agent calls - #41634

feat(agents): attach access groups to agents and enforce them for models, MCP servers and agent calls#41634
yassin-berriai merged 16 commits into
mainfrom
litellm_agent_access_groups

Commits on Sep 17, 2026

feat(agents): attach access groups to agents and enforce them for models, MCP servers and agent calls

Merge remote-tracking branch 'origin/main' into litellm_agent_access_groups

refactor(agents): mark Callable loader aliases for the type discipline gate

style(ui): format add_agent_form test with prettier

test(agents): inject the access group ceiling resolver instead of patching it

refactor(agents): keep the model listing cap within the type-discipline budget

fix(agents): evict the cached agent access groups on every agent write and cap the model listing

refactor(agents): exhaust the agent access match and drop routine comments

fix(agents): import assert_never from typing_extensions for Python 3.10

refactor(agents): resolve attached access groups from the agent registry instead of the DB on the request path

fix(agents): return on every branch of the agent access ceiling so CodeQL sees no fall-through

refactor(agents): combine key and team agent grants without a fall-through match

Commits on Sep 20, 2026

Merge remote-tracking branch 'origin/main' into litellm_agent_access_groups

Merge remote-tracking branch 'origin/main' into litellm_agent_access_groups

style(agents): tidy typing and docstring in access group ceiling helpers

Commits on Sep 21, 2026

fix(proxy): scope agent permissions to invoking caller