LiteLLM 1.106.0 ships Decisions endpoints and tighter MCP defaults

LiteLLM published 1.106.0 on October 18, 2026. This is a stable gateway update, not a new standalone model.

What changed

• Decision-model integrations gain /v1/decisions and /v1/systemone routes, with corresponding playground and routing work.
• SDK users get run_tool_loop and arun_tool_loop helpers for in-process tool-calling loops.
• A quickstart brings up the gateway, Postgres and admin interface; the notes also include a Windows PowerShell quickstart.
• MCP servers using stdio are disabled by default. Operators upgrading an existing setup should check that behavior before rollout.
• New controls cover end-user model access, MCP operation rate limits and opt-in default-deny policies for vector stores and search tools.

Stable versus preview

The same day's 1.107.0-rc.1 is explicitly a prerelease. Its notes add an agent-access default-deny option and stateless MCP protocol capabilities, alongside OAuth and token-counting changes. It is not interchangeable with the stable version above. We group these announcements here rather than treating each tag as a separate product launch.

License and cost

The license grants MIT terms to the core while excluding the enterprise directory, which has separate terms. The pricing page distinguishes a free self-hosted core from separately priced Enterprise features. Infrastructure and upstream model usage remain separate costs.

This summary is based on release notes, not a hands-on reliability or speed test. See the LiteLLM hub.