Mozilla LLM Proxy Auth (MLPA)

Authenticates and proxies LLM requests through LiteLLM to enact budgets and per-user management.

Auth strategies supported:

• Firefox Account Auth
• iOS App Attest
• Google Play Integrity

Setup

make setup

This creates a virtual environment in .venv/, installs dependencies, and installs the tool locally in editable mode.

Running MLPA locally with Docker

Run LiteLLM and PostgreSQL

1. docker compose -f litellm_docker_compose.yaml up -d

   (docker compose down --volumes --remove-orphans to remove all)

Create and migrate appattest database

2. sh ./scripts/create-app-attest-database.sh

3. Migrate app_attest (repo root): bash scripts/migrate-app-attest-database-local.sh or uv run alembic upgrade head

4. Set MLPA_DEBUG=true in the config.py or .env file

Create a virtual LiteLLM key

5. Run python scripts/create-and-set-virtual-key.py (also sets the value in .env)

Run MLPA

6. Install it as a library:

pip install --no-cache-dir -e .

7. Run the binary

mlpa

Navigate to

Config (see LiteLLM Documentation for more config options)

See config.py for all configuration variables

Also See litellm_config.yaml for litellm config

Service account configured to hit VertexAI: service_account.json should be in directory root

API Documentation

After running, Swagger can be viewed at http://localhost:<PORT>/api/docs