{"record":{"id":"439829240ea3fb65","repo":"BerriAI/litellm","slug":"only-proxy-admins-can-update-mcp-toolsets","errorCode":null,"errorMessage":"Only proxy admins can update MCP toolsets.","messagePattern":"Only proxy admins can update MCP toolsets\\.","errorType":"http","errorClass":"HTTPException","httpStatus":403,"severity":"error","filePath":"litellm/proxy/management_endpoints/mcp_management_endpoints.py","lineNumber":2916,"sourceCode":"            raise HTTPException(\n                status_code=status.HTTP_404_NOT_FOUND,\n                detail={\"error\": f\"Toolset '{toolset_id}' not found.\"},\n            )\n        return toolset\n\n    @router.put(\n        \"/toolset\",\n        description=\"Update an existing MCP toolset (admin only)\",\n    )\n    @management_endpoint_wrapper\n    async def edit_mcp_toolset(\n        payload: UpdateMCPToolsetRequest,\n        user_api_key_dict: UserAPIKeyAuth = Depends(user_api_key_auth),\n        litellm_changed_by: str | None = Header(None),\n    ):\n        prisma_client: Final = get_prisma_client_or_throw(\"Database not connected. Connect a database to your proxy\")\n        if LitellmUserRoles.PROXY_ADMIN != user_api_key_dict.user_role:\n            raise HTTPException(\n                status_code=status.HTTP_403_FORBIDDEN,\n                detail={\"error\": \"Only proxy admins can update MCP toolsets.\"},\n            )\n        touched_by: Final = (\n            get_audit_log_changed_by(\n                litellm_changed_by=litellm_changed_by,\n                user_api_key_dict=user_api_key_dict,\n                litellm_proxy_admin_name=LITELLM_PROXY_ADMIN_NAME,\n            )\n            or LITELLM_PROXY_ADMIN_NAME\n        )\n        try:\n            result: Final = await update_mcp_toolset(prisma_client, payload, touched_by)\n        except UniqueViolationError:\n            raise HTTPException(\n                status_code=status.HTTP_409_CONFLICT,\n                detail={\n                    \"error\": (","sourceCodeStart":2898,"sourceCodeEnd":2934,"githubUrl":"https://github.com/BerriAI/litellm/blob/77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8/litellm/proxy/management_endpoints/mcp_management_endpoints.py#L2898-L2934","documentation":"Admin gate on MCP toolset updates: only PROXY_ADMIN may edit toolsets; other roles get HTTP 403.","triggerScenarios":"Thrown at litellm/proxy/management_endpoints/mcp_management_endpoints.py:2916 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Use a PROXY_ADMIN API key to update MCP toolsets."],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8","analyzedAt":"2026-08-18T11:44:31.656Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-14T05:17:10.506Z"}