LiteLLM MCP Tool Invocation via Empty-Credential Bypassed Session

Arnold Chan@slaz

•updated Sep 12, 2026•0•0•1

Detects instances where a LiteLLM proxy is utilized to invoke sensitive Model Context Protocol (MCP) tools (e.g., database, github, slack, jira, ci/cd) while authentication is bypassed ('allow_all_keys=true') and no explicit API key is provided. This indicates a potential unauthorized access attempt to sensitive integrations via a misconfigured proxy.