### Check for existing issues

- [x] I have searched the existing issues and checked that my issue is not a duplicate.

### What happened?

1. **Create form:** Show BYOK block when `transportType` is `http`, `sse`, or `openapi` (exclude `stdio`). 2. **Edit form:** Add `is_byok`, `byok_description`, `byok_api_key_help_url` to `mcp_server_edit.tsx` for existing servers (read-only hint if toggling off after users have credentials). 3. **Docs:** Clarify BYOK applies to OpenAPI-generated MCP **and** native HTTP MCP servers. Optional: add `GET /v1/mcp/server/{server_id}/user-credential/status` symmetric to `oauth-user-credential/status` for BYOK (today only `has_user_credential` on list endpoint). --- ## Workaround (today) Register via API: ```bash curl -X POST "$LITELLM_BASE/v1/mcp/server" \ -H "Authorization: Bearer $ADMIN_KEY" \ -H "Content-Type: application/json" \ -d '{ "server_name": "my_mcp_server", "url": "https://my-mcp.example.com/mcp", "transport": "http", "auth_type": "bearer_token", "is_byok": true, "allow_all_keys": true, "byok_description": ["Describe access for users"], "byok_api_key_help_url": "https://docs.example.com/api-keys" }'…