feature/mcp-and-api-keys #11

simonfranken · 2026-03-16T14:36:12Z

simonfranken commented

2026-03-16 14:36:12 +00:00

No description provided.

simonfranken added 2 commits 2026-03-16 14:36:13 +00:00

feat: add MCP endpoint and API key management 64211e6a49

- Add ApiKey Prisma model (SHA-256 hash, prefix, lastUsedAt) with migration
- Implement ApiKeyService (create, list, delete, verify)
- Extend requireAuth middleware to accept sk_-prefixed API keys alongside JWTs
- Add GET/POST /api-keys routes for creating and revoking keys
- Add stateless Streamable HTTP MCP server at POST/GET /mcp exposing all 20
  time-tracking tools (clients, projects, time entries, timer, statistics,
  client targets and corrections)
- Frontend: ApiKey types, apiKeys API module, useApiKeys hook
- Frontend: ApiKeysPage with key table, one-time raw-key reveal modal, and
  inline revoke confirmation
- Wire /api-keys route and add API Keys link to Management dropdown in Navbar

fix: review fixes for MCP and API key feature a7ab55932f

- Remove spurious ALTER TABLE client_targets DROP DEFAULT from migration
  (Prisma schema drift side-effect unrelated to this PR)
- Surface revoke errors in ApiKeysPage UI via deleteApiKey.isError
- Fix UpdateProjectInput.color type to allow null, removing unsafe cast
  in the update_project MCP tool handler

simonfranken merged commit ca521000bf into main

2026-03-16 16:46:27 +00:00

simonfranken referenced this issue from a commit

2026-03-16 16:46:29 +00:00

Merge pull request 'feature/mcp-and-api-keys' (#11) from feature/mcp-and-api-keys into main

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: simonfranken/timetracker#11