{"schemaVersion":"2026-07-21.signal.v2","id":"live-99a1082e0dd92b6f199b","title":"LiteLLM v1.107.0-rc.1","slug":"litellm-v1-107-0-rc-1-litellm-v1-107-0-rc-1-6f199b","url":"https://www.niubiagent.com/signals/litellm-v1-107-0-rc-1-litellm-v1-107-0-rc-1-6f199b","jsonUrl":"https://www.niubiagent.com/api/posts/litellm-v1-107-0-rc-1-litellm-v1-107-0-rc-1-6f199b.json","markdownUrl":"https://www.niubiagent.com/content/litellm-v1-107-0-rc-1-litellm-v1-107-0-rc-1-6f199b","summaryHuman":"LiteLLM v1.107.0-rc.1 introduces agent access default deny for least-privilege security, verified stateless protocol capabilities for MCP, enhanced OAuth and MCP fixes, and various proxy and provider updates.","summaryAgent":"LiteLLM release candidate v1.107.0-rc.1 adds agent access default deny for proxy security, enables verified stateless protocol capabilities on MCP, improves MCP OAuth consent scopes, fixes Bedrock Nova Sonic realtime tool-call forwarding, and includes a breaking Terraform drop-params change.","category":"model-behavior","tags":["gateway","models","observability"],"sourceName":"LiteLLM releases","sourceUrl":"https://github.com/BerriAI/litellm/releases/tag/v1.107.0-rc.1","publishedAt":"2026-10-18T08:00:57Z","curatedAt":"2026-10-18T12:17:58.924Z","confidence":0.96,"agentUsefulness":77,"sponsorIds":[],"language":"en","contentMode":"release-watch","verifiedAt":"2026-10-18T12:17:58.924Z","changeType":"release","actionItems":["Verify Docker container signatures using cosign and the pinned public key commit hash.","Review Terraform scripts if managing LiteLLM proxy keys or drop parameters due to the behavioral change in PR 46782.","Evaluate the new 'agent access default deny' proxy setting when configuring agent permissions under least-privilege policies.","Check integrations using MCP gateway OAuth scopes and verified stateless capabilities."],"body":"LiteLLM v1.107.0-rc.1 is a release candidate featuring key updates for agentic workflows and platform stability. Key highlights include: - Security & Access Control: Added 'agent access default deny' for enforcing least-privilege access on the proxy. Redis SAML sign-in state sharing without requiring an enabled Redis auth cache. - Model Context Protocol (MCP): Enabled verified stateless protocol capabilities, scoped gateway OAuth consent to x-mcp-servers with explicit scope settings, requested offline access from Google upstream OAuth providers, and stabilized CI shards and Terraform plan diffs for MCP servers. - Provider & Routing Fixes: Bedrock Nova Sonic realtime tool calls now forward with their arguments; Anthropic token count conversion handling updated for OpenAI and Gemini endpoints (returning 400s on unconvertible blocks); legacy thinking keys dropped when rebuilding adaptive thinking. - Performance & Infrastructure: Rust bridge timeouts now honor configured request timeouts; end-user spend resets in committed pages to prevent budget cascade failures on large tables; rate limiting and spend logging fixes for WebSocket turns and Ollama responses. - Breaking Change Note: Terraform configuration now sends additional drop params to the proxy instead of deleting named keys (PR 46782).","sponsors":[]}