Summary
LiteLLM 1.103.0-dev.1 requires admission for delegated MCP OAuth and adds post-call guardrail support for background Responses and streaming flows. It also bounds tool and guardrail index operations against spend-log budgets, improves timeout logging, fixes reasoning translation and documents signed-container verification.
Why it matters
Gateway operators get more explicit controls over agent tool access, streaming safety, model-cost accounting and deployment provenance.
Related coverage
- Gemini CLI 0.60 hardens MCP OAuth, sandboxing and extension boundaries
- Claude Code v2.1.273 adds gateway telemetry hints and safer agent-session recovery
- Mastra 1.67 adds persisted workflow authoring and platform-backed agent tools