plugins

Plugin Auth Token

Changed on

Issue a short-lived, audience-scoped plugin session claim.

The claim contains {user_id, user_role, plugin, exp}. It does NOT contain the caller's litellm bearer token — a compromised plugin can only learn the caller's identity, not impersonate them against the proxy.

Encrypted with a key derived from HMAC(LITELLM_SALT_KEY, plugin_name), so each plugin holds only its own key and cannot forge claims for others.

Requires LITELLM_SALT_KEY to be set; returns 503 otherwise.

get/api/plugins/auth-token

Request

  • Base URL: https://api.sea-lion.ai (the document declares no server; this is the origin it was published from)
  • URL: https://api.sea-lion.ai/api/plugins/auth-token
  • Auth: API key in header x-litellm-api-key

Query parameters

plugin_namestring

Response

Successful Response

object required

Changes