High-risk tools in Litellm

High severity Litellm MCP Server 5 of 11 tools

5 of the 11 tools in Litellm are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

chat_completion Execute

Generate chat completions using LiteLLM. Supports all models available in your LiteLLM instance.
completion Execute

Generate text completions (legacy endpoint) using LiteLLM.
create_embedding Execute

Generate embeddings using LiteLLM
create_image Execute

Generate images using LiteLLM (/images/generations)
create_speech Execute

Generate speech audio from text using LiteLLM (/audio/speech)

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Litellm

Tools at high risk

Attacks that target this class

More on Litellm

Enforce policy on every Litellm tool call.