fix: MCP authorization parameter implementation#4052

Merged

ashwinb merged 103 commits intollamastack:mainfrom

omaryashraf5:add-mcp-authentication-param

Nov 14, 2025

Commits on Nov 3, 2025

MCP authentication parameter implementation
Omar Abdelwahab
committed
Added minor changes
Omar Abdelwahab
committed

Commits on Nov 4, 2025

precommit
Omar Abdelwahab
committed
added a fix
Omar Abdelwahab
committed
minor fix
Omar Abdelwahab
committed
Removed the MCPAuthorization class relying on bearer token
Omar Abdelwahab
committed
precommit
Omar Abdelwahab
committed
precommit
Omar Abdelwahab
committed
reverted some formatting changes
Omar Abdelwahab
committed
reverted some formatting changes
Omar Abdelwahab
committed
removed _convert_authorization_to_headers
Omar Abdelwahab
committed
minor linting change
Omar Abdelwahab
committed
reverting some formatting changes
Omar Abdelwahab
committed
reverting some formatting
Omar Abdelwahab
committed
minor formatting change
Omar Abdelwahab
committed
updated the test script
Omar Abdelwahab
committed

Commits on Nov 5, 2025

Merge branch 'main' into add-mcp-authentication-param
omaryashraf5
authored
Updated the authentication field to take just the token
Omar Abdelwahab
committed
precommit
Omar Abdelwahab
committed
raising an error when the authentication field is present in the authorization field and in the header
Omar Abdelwahab
committed
formatting
Omar Abdelwahab
committed
created a single helper function and updated list_mcp_tools and invoke_mcp_tool. Removed the comments in openai_responses.py
Omar Abdelwahab
committed
fix: update MCP tool runtime provider to use new function signatures
Omar Abdelwahab
committed
Merge branch 'main' into add-mcp-authentication-param
omaryashraf5
authored

Commits on Nov 6, 2025

rejecting headers that include Authorization in the header and pointing them to the authorization param.
Omar Abdelwahab
committed
fix: update test to use authorization parameter instead of headers
Omar Abdelwahab
committed
Updated a single test case to not include authorization field in the header
Omar Abdelwahab
committed
Updated get_headers_from_request
Omar Abdelwahab
committed
fix: update test_mcp to use authorization parameter instead of headers
Omar Abdelwahab
committed
precommit
Omar Abdelwahab
committed
formatting issues
Omar Abdelwahab
committed
removed a small comment
Omar Abdelwahab
committed
precommit
Omar Abdelwahab
committed

Commits on Nov 7, 2025

feat: add response sanitization and validation for MCP authorization
Omar Abdelwahab
committed
test: update error message match for authorization validation
Omar Abdelwahab
committed
refactor: move Authorization validation from API model to handler layer
Omar Abdelwahab
committed
refactor: move Authorization validation to correct handler file
Omar Abdelwahab
committed
security: enforce Authorization rejection in remote MCP provider
Omar Abdelwahab
committed
feat: implement dedicated mcp_authorization field for remote provider
Omar Abdelwahab
committed
precommit
Omar Abdelwahab
committed
docs: add comprehensive docstring for MCPProviderDataValidator
Omar Abdelwahab
committed
formatting
Omar Abdelwahab
committed
formatting changes
Omar Abdelwahab
committed
docs: clarify security mechanism comments in get_headers_from_request
Omar Abdelwahab
committed
Merge branch 'main' into add-mcp-authentication-param
omaryashraf5
authored
fix: update tests to use new mcp_authorization field
Omar Abdelwahab
committed
fix: correct import path for LlamaStackAsLibraryClient in test
Omar Abdelwahab
committed
precommit run
Omar Abdelwahab
committed

Commits on Nov 10, 2025

Commits on Nov 11, 2025

Commits on Nov 12, 2025

feat: unify MCP authentication across Responses and Tool Runtime APIs
Omar Abdelwahab
committed
fix: add authorization parameter to all ToolRuntime provider implementations
Omar Abdelwahab
committed
chore: trigger CI rebuild with fresh Python cache
Omar Abdelwahab
committed
fix: remove syntax errors from test files caused by sed
Omar Abdelwahab
committed
Merge branch 'main' into add-mcp-authentication-param
omaryashraf5
authored
chore: trigger CI - all provider signatures fixed
Omar Abdelwahab
committed
fix: add authorization parameter to ToolRuntimeRouter and routing table
Omar Abdelwahab
committed
Fix CI: Force reinstall llama-stack from source
Omar Abdelwahab
committed
Fix CI: Clear Python bytecode cache before reinstall
Omar Abdelwahab
committed
fix(ci): Remove uv.lock before sync to ensure fresh dependency resolution
Omar Abdelwahab
committed
fix(ci): Clear UV cache directory instead of lock file
Omar Abdelwahab
committed
fix(ci): Clear cached .venv directory to ensure fresh install
Omar Abdelwahab
committed
fix(ci): Add final bytecode cache clear after installations
Omar Abdelwahab
committed
fix(ci): Install ci-tests distribution dependencies to fix test failures
Omar Abdelwahab
committed
fix(ci): Use 'uv run' to execute llama command in virtual environment
Omar Abdelwahab
committed
fix(ci): Prevent Python from caching old code during uv sync
Omar Abdelwahab
committed

Commits on Nov 13, 2025

debug: Add detailed logging for signature mismatch errors
Omar Abdelwahab
committed
fix(ci): Add authorization parameter to api_recorder tool runtime patches
Omar Abdelwahab
committed
revert(ci): Remove unnecessary CI workarounds from action.yml
Omar Abdelwahab
committed
revert(debug): Remove temporary debug logging from resolver
Omar Abdelwahab
committed
fix(tool-runtime): Remove authorization from list_runtime_tools()
Omar Abdelwahab
committed
fix(tool-runtime): Remove authorization from list_runtime_tools in all providers
Omar Abdelwahab
committed
feat(tool-runtime): Add authorization parameter to list_runtime_tools
Omar Abdelwahab
committed
precommit
Omar Abdelwahab
committed
Merge branch 'main' into add-mcp-authentication-param
ashwinb
authored
feat(tool-runtime): Add authorization parameter with backward compatibility
Omar Abdelwahab
committed
Updated the test cases to support the headers for now
Omar Abdelwahab
committed
Updated some unit tests
Omar Abdelwahab
committed
Added comments and updated model_context_protocol.py
Omar Abdelwahab
committed
updated test_tools_with_schemas
Omar Abdelwahab
committed
Merge remote-tracking branch 'upstream/main' into add-mcp-authentication-param
Omar Abdelwahab
committed
updated a comment in mcp.py
Omar Abdelwahab
committed
Merge branch 'main' into add-mcp-authentication-param
omaryashraf5
authored
Merge branch 'main' into add-mcp-authentication-param
omaryashraf5
authored
Merge branch 'main' into add-mcp-authentication-param
omaryashraf5
authored
Merge remote-tracking branch 'upstream/main' into add-mcp-authentication-param
Omar Abdelwahab
committed
fix: Update import path after API reorganization
Omar Abdelwahab
committed

Commits on Nov 14, 2025

test: Mark test_mcp_tools_in_inference as xfail due to deprecated registration API
Omar Abdelwahab
committed
test: Remove xfail marker from test_mcp_tools_in_inference
Omar Abdelwahab
committed
test: Skip MCP test when SDK lacks register_tool_group method
Omar Abdelwahab
committed
fix: Update MCP test to use register() instead of register_tool_group()
Omar Abdelwahab
committed
test: Add timeout to test_conversation_error_handling to prevent CI hang
Omar Abdelwahab
committed
test: Remove skip marker from MCP authentication tests
Omar Abdelwahab
committed
test: Use responses_client and remove library client skips
Omar Abdelwahab
committed
test: Fix error handling test to accept BadRequestError
Omar Abdelwahab
committed
test: Add skip marker for MCP auth tests in replay mode
Omar Abdelwahab
committed
test: Keep skip marker for MCP auth tests (recordings needed)
Omar Abdelwahab
committed
Add MCP authorization parameter support with test recordings
Omar Abdelwahab
committed
precommit
Omar Abdelwahab
committed