{"record":{"id":"90833ac7b3db51cd","repo":"BerriAI/litellm","slug":"admin-access-required-to-view-mcp-server-submissio","errorCode":null,"errorMessage":"Admin access required to view MCP server submissions.","messagePattern":"Admin access required to view MCP server submissions\\.","errorType":"http","errorClass":"HTTPException","httpStatus":403,"severity":"error","filePath":"litellm/proxy/management_endpoints/mcp_management_endpoints.py","lineNumber":1312,"sourceCode":"\n    @router.get(\n        \"/server/submissions\",\n        description=\"Returns all MCP servers submitted by non-admin users (admin review queue). Mirrors GET /guardrails/submissions.\",\n        dependencies=[Depends(user_api_key_auth)],\n        response_model=MCPSubmissionsSummary,\n    )\n    @management_endpoint_wrapper\n    async def get_mcp_server_submissions(\n        user_api_key_dict: UserAPIKeyAuth = Depends(user_api_key_auth),\n    ):\n        \"\"\"\n        Admin-only endpoint to view all user-submitted MCP servers pending review.\n        \"\"\"\n        if user_api_key_dict.user_role not in (\n            LitellmUserRoles.PROXY_ADMIN,\n            LitellmUserRoles.PROXY_ADMIN_VIEW_ONLY,\n        ):\n            raise HTTPException(\n                status_code=status.HTTP_403_FORBIDDEN,\n                detail={\"error\": \"Admin access required to view MCP server submissions.\"},\n            )\n\n        prisma_client: Final = get_prisma_client_or_throw(\"Database not connected. Connect a database to your proxy\")\n\n        submissions: Final = await get_mcp_submissions(prisma_client)\n        submissions.items = _redact_mcp_credentials_list(submissions.items)\n        if not _user_is_full_admin(user_api_key_dict):\n            submissions.items = _sanitize_mcp_server_list_for_non_admin(submissions.items)\n        return submissions\n\n    @router.put(\n        \"/server/{server_id}/approve\",\n        description=\"Approve a pending MCP server submission (admin only). Mirrors PUT /guardrails/{id}/approve.\",\n        dependencies=[Depends(user_api_key_auth)],\n        response_model=LiteLLM_MCPServerTable,\n    )","sourceCodeStart":1294,"sourceCodeEnd":1330,"githubUrl":"https://github.com/BerriAI/litellm/blob/77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8/litellm/proxy/management_endpoints/mcp_management_endpoints.py#L1294-L1330","documentation":"Role guard on GET /v1/mcp/server/submissions: the review-queue listing is admin-only. The caller's user_role is neither PROXY_ADMIN nor another admin-view role, so pending user submissions are not exposed to them.","triggerScenarios":"Thrown at litellm/proxy/management_endpoints/mcp_management_endpoints.py:1312 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Authenticate with a proxy admin API key.","Ask a proxy admin to view the MCP server submissions."],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8","analyzedAt":"2026-08-18T11:44:31.656Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}