Add changeset

Author: cmsparks

.changeset/neat-llamas-shop.md

@@ -0,0 +1,20 @@
+---
+'workers-observability': patch
+'cloudflare-casb-mcp-server': patch
+'cloudflare-browser-mcp-server': patch
+'containers-mcp': patch
+'workers-bindings': patch
+'workers-builds': patch
+'@repo/mcp-common': patch
+'dns-analytics': patch
+'dex-analysis': patch
+'cloudflare-ai-gateway-mcp-server': patch
+'auditlogs': patch
+'@repo/tools': patch
+'cloudflare-autorag-mcp-server': patch
+'graphql-mcp-server': patch
+'logpush': patch
+'cloudflare-radar-mcp-server': patch
+---
+
+Add API token passthrough auth

packages/mcp-common/src/api-token-mode.ts

@@ -16,13 +16,16 @@ export async function isApiTokenRequest(req: Request, env: RequiredEnv) {
 	}
 
 	const authHeader = req.headers.get('Authorization')
+	console.log(authHeader)
 	if (!authHeader) return false
 
 	const [type, token] = authHeader.split(' ')
 	if (type !== 'Bearer') return false
 
-	// Return true only if the token doesn't start with 'token:'
-	return !token.startsWith('token:')
+	// Return true only if the token was issued by the OAuthProvider.
+	// A token provisioned by the OAuthProvider has 3 parts, split by colons.
+	const codeParts = token.split(':')
+	return codeParts.length !== 3
 }
 
 export async function handleApiTokenMode<

packages/tools/bin/run-changeset-new

@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+set -eu
+
+repo_root=$(git rev-parse --show-toplevel)
+cd "$repo_root"
+
+# Stage changes so that changeset can see them
+git add .
+
+changeset
+
+# Make sure a changeset was created
+git status --porcelain | grep '.changeset/.*\.md' >/dev/null && true ||
+	(echo "🚨 No changeset created" && exit 1)
+
+new_changeset=$(ls -t .changeset/*.md | head -n 1)
+echo "📝 New changeset: $new_changeset"
+git add "$new_changeset"