mirror of
https://github.com/supermemoryai/supermemory.git
synced 2026-10-27 06:15:15 +00:00
f355dc8039
## What The Supermemory API now serves the session endpoint unversioned at `/session` (supermemoryai/mono#3626). `sm_` API-key validation in the MCP worker calls `/session` instead of `/v3/session`. One-line code change. - `apps/mcp/src/server/auth/index.ts`: `fetchSession` requests `/session`. - `apps/mcp/src/server/auth/index.test.ts`: asserts the new URL and that a refused key makes exactly one request. - `apps/mcp/src/shared/types.ts`: comment updated. ## Deploy order This worker depends on the API serving `/session`. **Deploy mono#3626 first.** Until then, production answers `/session` with 404 for full keys and 403 for scoped keys (the scope allowlist is checked before routing), and every `sm_` key would be rejected. No fallback to `/v3/session` on purpose: the only "old server" in scope is that deploy window, and a failed-request fallback would blur 403/404 semantics for a case merge ordering already covers. ## Verification - `bun run check-types`, `vitest run src` (29/29). - Against the API with mono#3626 running: full key → `/session` 200 valid; scoped key → `/session` 200 valid; bad key → `/session` 401 rejected, single call. 🤖 Generated with [Claude Code](https://claude.com/claude-code) |
||
|---|---|---|
| .. | ||
| docs | ||
| mcp | ||
| memory-graph-playground | ||
| sdk-playground | ||
| web | ||