fix: correct MCP auth docs and add the missing elnora-review skill#28
Merged
Merged
Conversation
- Authentication section said API-key auth means "pass a Bearer token in the Authorization header", but the server read keys only from X-API-Key — so following the docs produced a 401. Reworded to show both headers (X-API-Key and Authorization: Bearer now both work) and when to use each. - Add the elnora-review skill (Knowledge Base review queue), which shipped in the CLI but was missed by the skills sync. Update the skill count to 10 and refresh the elnora-folders description (folders are Knowledge Base folders now). Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
ckivisild-elnora-ai
approved these changes
Jul 14, 2026
ckivisild-elnora-ai
left a comment
ckivisild-elnora-ai
left a comment
Member
There was a problem hiding this comment.
looks good, reviewed and approved
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Two fixes
1. The Authentication section was wrong. It said API-key auth means "Pass a Bearer token in the Authorization header" — but the MCP server read API keys only from
X-API-Key, so following the docs returned401 invalid_token. Reworded to show both headers (X-API-KeyandAuthorization: Bearer— both accepted once the paired server change lands) and when to use each.2. The
elnora-reviewskill was missing. It shipped in the CLI (v2.5.0, KB review queue) but the release skills-sync didn't copy it (a separate CLI-workflow fix addresses the root cause). Seeded it here so plugin users get it now. Bumped the skill count to 10 and refreshed theelnora-foldersdescription (folders are Knowledge Base folders now, and support sharing).Pairs with
elnora-mcp-server— accept an API key sent asAuthorization: Bearer(makes the reworded docs true).elnora-cli— fix the releasesync-skillsjob so new skills sync automatically (root cause of the missing skill).