BerriAI/litellm · error · HTTPException

Admin access required to approve MCP server submissions.

Error message

Admin access required to approve MCP server submissions.

What it means

Role guard on PUT /v1/mcp/server/{server_id}/approve: approval flips a submission to active and loads it into the runtime registry, a privileged mutation. The caller's role is not exactly PROXY_ADMIN, so the request is rejected with 403 before the server is even looked up.

Source

Thrown at litellm/proxy/management_endpoints/mcp_management_endpoints.py:1340

            submissions.items = _sanitize_mcp_server_list_for_non_admin(submissions.items)
        return submissions

    @router.put(
        "/server/{server_id}/approve",
        description="Approve a pending MCP server submission (admin only). Mirrors PUT /guardrails/{id}/approve.",
        dependencies=[Depends(user_api_key_auth)],
        response_model=LiteLLM_MCPServerTable,
    )
    @management_endpoint_wrapper
    async def approve_mcp_server_submission(
        server_id: str,
        user_api_key_dict: UserAPIKeyAuth = Depends(user_api_key_auth),
    ):
        """
        Admin approves a pending or previously-rejected MCP server — sets approval_status=active and loads it into the runtime registry.
        """
        if LitellmUserRoles.PROXY_ADMIN != user_api_key_dict.user_role:
            raise HTTPException(
                status_code=status.HTTP_403_FORBIDDEN,
                detail={"error": "Admin access required to approve MCP server submissions."},
            )

        prisma_client: Final = get_prisma_client_or_throw("Database not connected. Connect a database to your proxy")

        existing: Final = await get_mcp_server(prisma_client, server_id)
        if existing is None:
            raise HTTPException(
                status_code=status.HTTP_404_NOT_FOUND,
                detail={"error": f"MCP server '{server_id}' not found."},
            )
        if existing.approval_status == MCPApprovalStatus.active:
            raise HTTPException(
                status_code=status.HTTP_400_BAD_REQUEST,
                detail={"error": "MCP server is already active."},
            )

View on GitHub (pinned to 77b7c6c40c)

Solutions

1. Authenticate with a proxy admin API key.
2. Ask a proxy admin to approve the submission.

When it happens

Trigger: Thrown at litellm/proxy/management_endpoints/mcp_management_endpoints.py:1340 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of BerriAI/litellm@77b7c6c40c (2026-08-18). Data as JSON: /api/errors/0417b7ff3775874d. Report an issue: GitHub.