BerriAI/litellm · error · HTTPException

dcr_bridge is only supported for auth_type true_passthrough

Error message

dcr_bridge is only supported for auth_type true_passthrough or oauth_delegate (stored auth_type: {stored_auth_type_name!r}). Include the server's auth_type in the update payload or configure one of the client-forwarded token modes first.

What it means

Error "dcr_bridge is only supported for auth_type true_passthrough or oauth_delegate (stored auth_type: {stored_auth_type_name!r}). Include the server's auth_type in the update payload or configure one of the client-forwarded token modes first." thrown in BerriAI/litellm.

Source

Thrown at litellm/proxy/management_endpoints/mcp_management_endpoints.py:2561

            old_server_record_read_failed = False
        except Exception as exc:  # noqa: BLE001 - advisory read; invalidation is best-effort end-to-end
            verbose_logger.warning(
                "MCP server %s: could not snapshot the pre-update record; skipping the stale-token check: %s",
                payload.server_id,
                exc,
            )
            old_server_record = None
            old_server_record_read_failed = True

        if (
            payload.dcr_bridge
            and payload.auth_type is None
            and (old_server_record is not None or old_server_record_read_failed)
        ):
            stored_auth_type: Final = old_server_record.auth_type if old_server_record else None
            stored_auth_type_name: Final = getattr(stored_auth_type, "value", stored_auth_type)
            if stored_auth_type not in (MCPAuth.true_passthrough, MCPAuth.oauth_delegate):
                raise HTTPException(
                    status_code=status.HTTP_400_BAD_REQUEST,
                    detail={
                        "error": (
                            "dcr_bridge is only supported for auth_type true_passthrough or "
                            f"oauth_delegate (stored auth_type: {stored_auth_type_name!r}). Include "
                            "the server's auth_type in the update payload or configure one of the "
                            "client-forwarded token modes first."
                        )
                    },
                )

        # try to update the mcp server
        mcp_server_record_updated: Final = await update_mcp_server(
            prisma_client,
            payload,
            touched_by=user_api_key_dict.user_id or LITELLM_PROXY_ADMIN_NAME,
            fields_set=payload_fields_set,
        )

View on GitHub (pinned to 77b7c6c40c)

Solutions

1. Include auth_type in the update payload set to true_passthrough or oauth_delegate.
2. Configure a client-forwarded token mode on the server before enabling dcr_bridge.

When it happens

Trigger: Thrown at litellm/proxy/management_endpoints/mcp_management_endpoints.py:2561 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of BerriAI/litellm@77b7c6c40c (2026-08-18). Data as JSON: /api/errors/d180e1a17e83d23d. Report an issue: GitHub.