[Feat] Add Authentication + Permission Management for MCP List, Call Tool Ops

[ishaan-jaff]

[Feat] Add Authentication + Permission Management for MCP List, Call Tool Ops

Relevant issues

Pre-Submission checklist

Please complete all items before asking a LiteLLM maintainer to review your PR

• I have Added testing in the tests/litellm/ directory, Adding at least 1 test is a hard requirement - see details
• I have added a screenshot of my new test passing locally
• My PR passes all unit tests on make test-unit
• My PR's scope is as isolated as possible, it only solves 1 specific problem

Type

🆕 New Feature
✅ Test

Changes

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
litellm	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Jun 13, 2025 4:57pm

[Copilot]

Pull Request Overview

Adds authentication and permission filtering for MCP tool listing and invocation by integrating API key checks and team-based permissions into the MCP server and its management components.

• Introduces UserAPIKeyAuthMCP for extracting and validating API keys from ASGI scopes, and retrieval of allowed MCP servers.
• Updates MCP server routes (list_tools, call_tool, HTTP/SSE handlers) to set and use an authentication context via middleware.
• Modifies MCPServerManager to filter available tools based on per-key and per-team permissions.

Reviewed Changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
tests/test_litellm/proxy/_experimental/mcp_server/auth/test_user_api_key_auth_mcp.py	Adds parametrized tests covering key‐ and team‐based server permissions and header parsing.
tests/mcp_tests/test_mcp_server.py	Extends streamable HTTP and SSE handler tests with a full ASGI scope.
litellm/proxy/_experimental/mcp_server/server.py	Injects auth context middleware, updates list_tools and HTTP/SSE handlers to retrieve and set auth context, and adds helper functions.
litellm/proxy/_experimental/mcp_server/mcp_server_manager.py	Adds get_allowed_mcp_servers and updates list_tools to only query permitted servers.
litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py	Implements header extraction, API key dispatch, and permission queries for keys and teams.
litellm/proxy/_experimental/mcp_server/auth/litellm_auth_handler.py	Wraps UserAPIKeyAuth to conform with MCP’s AuthenticatedUser.

Comments suppressed due to low confidence (2)

litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py:105

• There are no unit tests covering the team‐based permission code path in get_allowed_mcp_servers. Add tests for scenarios where user_api_key_auth.team_id provides allowed servers to verify correct intersection and set behavior.

async def get_allowed_mcp_servers(

litellm/proxy/_experimental/mcp_server/server.py:169

• The functions get_auth_context and set_auth_context are defined inside get_mcp_server_enabled() and thus not visible at module scope. This will cause NameError when used in list_tools and the HTTP/SSE handlers. Move their definitions to the module top level or before any usage.

user_api_key_auth = get_auth_context()