@acarmisc/backstage-plugin-litellm-backend 0.30.0 → 0.30.1

package/dist/services/keyService.js

@@ -119,7 +119,15 @@ async function createKeyForUser(user, input, ctx) {
         if (!input.team_id) {
             throw new KeyServiceError(400, { error: 'team_id is required when mcp_servers is set' });
         }
-        const disallowed = (0, mcpAccess_1.findDisallowedMcpServers)(mcpServers, (0, mcpAccess_1.teamMcpServers)(await getTeam(input.team_id)));
+        const allowed = (0, mcpAccess_1.teamMcpServers)(await getTeam(input.team_id));
+        let disallowed = (0, mcpAccess_1.findDisallowedMcpServers)(mcpServers, allowed);
+        if (disallowed.length > 0) {
+            // LiteLLM stores a team's grant by server id while callers name servers, so
+            // resolve the gateway's listing before refusing. A failed listing keeps the
+            // plain comparison.
+            const servers = await client.listMcpServers().catch(() => []);
+            disallowed = (0, mcpAccess_1.findDisallowedMcpServers)(mcpServers, allowed, servers);
+        }
         if (disallowed.length > 0) {
             throw new KeyServiceError(403, {
                 error: 'One or more requested MCP servers are not allowed',

package/dist/services/mcpAccess.d.ts

@@ -16,5 +16,13 @@ export declare function teamMcpServers(team: {
         mcp_servers?: string[];
     };
 } | undefined): string[];
-/** Requested names that are not in `allowed`, de-duplicated. */
-export declare function findDisallowedMcpServers(requested: string[], allowed: string[]): string[];
+/**
+ * Requested names that are not granted, de-duplicated. A team's list may hold a
+ * server's id while a caller names it (or the reverse), so a request also counts
+ * as granted when the gateway's listing links its name and id to an allowed entry.
+ * Without `servers` only exact matches count.
+ */
+export declare function findDisallowedMcpServers(requested: string[], allowed: string[], servers?: Array<{
+    id: string;
+    name?: string;
+}>): string[];

package/dist/services/mcpAccess.js

@@ -21,8 +21,15 @@ function teamMcpServers(team) {
     const listed = team?.object_permission?.mcp_servers ?? [];
     return [...new Set(listed)].filter(n => backstage_plugin_litellm_common_1.MCP_SERVER_NAME_RE.test(n));
 }
-/** Requested names that are not in `allowed`, de-duplicated. */
-function findDisallowedMcpServers(requested, allowed) {
+/**
+ * Requested names that are not granted, de-duplicated. A team's list may hold a
+ * server's id while a caller names it (or the reverse), so a request also counts
+ * as granted when the gateway's listing links its name and id to an allowed entry.
+ * Without `servers` only exact matches count.
+ */
+function findDisallowedMcpServers(requested, allowed, servers = []) {
     const ok = new Set(allowed);
-    return [...new Set(requested)].filter(n => !ok.has(n));
+    const granted = (n) => ok.has(n) ||
+        servers.some(s => (s.name === n || s.id === n) && (ok.has(s.id) || (s.name !== undefined && ok.has(s.name))));
+    return [...new Set(requested)].filter(n => !granted(n));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@acarmisc/backstage-plugin-litellm-backend",
-  "version": "0.30.0",
+  "version": "0.30.1",
   "description": "The Backstage backend plugin for LiteLLM governance",
   "backstage": {
     "role": "backend-plugin",