Update Desktop API Stainless config

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 72
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/beeper/beeper-desktop-api-81a39fdda33b337c5047b92f24bb2216150cba5507f9b66d3ef6a324e2b08e92.yml
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/beeper/beeper-desktop-api-8ba2755730c4180ec88f92a300948445d7917898abfc912ca3fa6adc766a7520.yml
 openapi_spec_hash: 30b435d7585d8b6951610e7147369779
-config_hash: 6b409dea8089a8bfc72ed9919dc1d0bb
+config_hash: a53888715ed00d433e5a5dafab9f7b9f

packages/mcp-server/src/http.ts

@@ -3,7 +3,6 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp';
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import { ClientOptions } from '@beeper/desktop-api';
-import cors from 'cors';
 import express from 'express';
 import pino from 'pino';
 import pinoHttp from 'pino-http';
@@ -12,11 +11,6 @@ import { getLogger } from './logger';
 import { McpOptions } from './options';
 import { initMcpServer, newMcpServer } from './server';
 
-const oauthResourceIdentifier = (req: express.Request): string => {
-  const protocol = req.headers['x-forwarded-proto'] ?? req.protocol;
-  return `${protocol}://${req.get('host')}/`;
-};
-
 const newServer = async ({
   clientOptions,
   mcpOptions,
@@ -32,28 +26,7 @@ const newServer = async ({
   const customInstructionsPath = mcpOptions.customInstructionsPath;
   const server = await newMcpServer({ stainlessApiKey, customInstructionsPath });
 
-  // parseClientAuthHeaders throws if the Authorization header uses an unsupported
-  // scheme, or (when the second arg is true) if the header is missing entirely.
-  // On error, we return 401 with WWW-Authenticate pointing to the OAuth metadata
-  // endpoint so clients know how to authenticate (RFC 9728).
-  let authOptions: Partial<ClientOptions>;
-  try {
-    authOptions = parseClientAuthHeaders(req, true);
-  } catch (error) {
-    const resourceIdentifier = oauthResourceIdentifier(req);
-    res.set(
-      'WWW-Authenticate',
-      `Bearer resource_metadata="${resourceIdentifier}.well-known/oauth-protected-resource"`,
-    );
-    res.status(401).json({
-      jsonrpc: '2.0',
-      error: {
-        code: -32000,
-        message: `Unauthorized: ${error instanceof Error ? error.message : error}`,
-      },
-    });
-    return null;
-  }
+  const authOptions = parseClientAuthHeaders(req, true);
 
   let upstreamClientEnvs: Record<string, string> | undefined;
   const clientEnvsHeader = req.headers['x-stainless-mcp-client-envs'];
@@ -152,16 +125,6 @@ const del = async (req: express.Request, res: express.Response) => {
   });
 };
 
-const oauthMetadata = (req: express.Request, res: express.Response) => {
-  const resourceIdentifier = oauthResourceIdentifier(req);
-  res.json({
-    resource: resourceIdentifier,
-    authorization_servers: ['http://localhost:23373'],
-    bearer_methods_supported: ['header'],
-    scopes_supported: 'read write',
-  });
-};
-
 const redactHeaders = (headers: Record<string, any>) => {
   const hiddenHeaders = /auth|cookie|key|token|x-stainless-mcp-client-envs/i;
   const filtered = { ...headers };
@@ -231,8 +194,6 @@ export const streamableHTTPApp = ({
     }),
   );
 
-  app.get('/.well-known/oauth-protected-resource', cors(), oauthMetadata);
-
   app.get('/health', async (req: express.Request, res: express.Response) => {
     res.status(200).send('OK');
   });