# LiteLLM v1.107.0-rc.1

Category: model-behavior
Published: 2026-10-18T08:00:57Z
Source: [LiteLLM releases](https://github.com/BerriAI/litellm/releases/tag/v1.107.0-rc.1)
Agent usefulness: 77/100
Confidence: 0.96
Content mode: release-watch
Verified: 2026-10-18T12:17:58.924Z
Tags: gateway, models, observability

## Human Summary
LiteLLM v1.107.0-rc.1 introduces agent access default deny for least-privilege security, verified stateless protocol capabilities for MCP, enhanced OAuth and MCP fixes, and various proxy and provider updates.

## Agent Summary
LiteLLM release candidate v1.107.0-rc.1 adds agent access default deny for proxy security, enables verified stateless protocol capabilities on MCP, improves MCP OAuth consent scopes, fixes Bedrock Nova Sonic realtime tool-call forwarding, and includes a breaking Terraform drop-params change.

## Body
LiteLLM v1.107.0-rc.1 is a release candidate featuring key updates for agentic workflows and platform stability. Key highlights include: - Security & Access Control: Added 'agent access default deny' for enforcing least-privilege access on the proxy. Redis SAML sign-in state sharing without requiring an enabled Redis auth cache. - Model Context Protocol (MCP): Enabled verified stateless protocol capabilities, scoped gateway OAuth consent to x-mcp-servers with explicit scope settings, requested offline access from Google upstream OAuth providers, and stabilized CI shards and Terraform plan diffs for MCP servers. - Provider & Routing Fixes: Bedrock Nova Sonic realtime tool calls now forward with their arguments; Anthropic token count conversion handling updated for OpenAI and Gemini endpoints (returning 400s on unconvertible blocks); legacy thinking keys dropped when rebuilding adaptive thinking. - Performance & Infrastructure: Rust bridge timeouts now honor configured request timeouts; end-user spend resets in committed pages to prevent budget cascade failures on large tables; rate limiting and spend logging fixes for WebSocket turns and Ollama responses. - Breaking Change Note: Terraform configuration now sends additional drop params to the proxy instead of deleting named keys (PR 46782).

## Recommended actions
- Verify Docker container signatures using cosign and the pinned public key commit hash.
- Review Terraform scripts if managing LiteLLM proxy keys or drop parameters due to the behavioral change in PR 46782.
- Evaluate the new 'agent access default deny' proxy setting when configuring agent permissions under least-privilege policies.
- Check integrations using MCP gateway OAuth scopes and verified stateless capabilities.

## Sponsors
No sponsor placement attached.

## Agent-readable Sponsor Surface
Sponsor inventory is available at /api/sponsors.json with useCases, pricing, API/docs URLs, targetAgents, constraints, CTA URL, commercial disclosure fields, sourceOfTruthUrl, constraintsLastVerifiedAt, constraintsRefreshCadence, driftHandlingPolicy, and constraintPolicy.