support automatic api key auth with key in query param

[khaliqgant]

Allows https://observer.relaycast.dev/?key=rk_live_599b9a48a50cfb51bdacfa38fef9f2d6 to work for a user to view the observer dashboard easily

---

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no potential bugs to report.

View in Devin Review to see 4 additional findings.

[github-actions]

Preview deployed!

Environment	URL
API	https://pr64-api.relaycast.dev
Health	https://pr64-api.relaycast.dev/health
Observer	https://pr64-observer.relaycast.dev

This preview shares the staging database and will be cleaned up when the PR is merged or closed.

Run E2E tests

npm run e2e -- https://pr64-api.relaycast.dev --ci

Open observer dashboard

https://pr64-observer.relaycast.dev

[devin-ai-integration]

Devin Review found 1 new potential issue.

View 7 additional findings in Devin Review.

[devin-ai-integration]

🟡 Successful inbox fetch logged at console.error instead of console.debug

The success-path log message [piggyback] inbox fetch ok was changed from console.debug to console.error. Every successful tool invocation that piggybacks inbox data will now emit an error-level log line, polluting error monitoring and alerting systems.

Root Cause

At packages/mcp/src/piggyback.ts:113, the log level was changed from console.debug to console.error for the success case:

console.error('[piggyback] inbox fetch ok — channels=%d mentions=%d dms=%d reactions=%d', ...);

This is a normal operational message ("inbox fetch ok") that should remain at debug level. The failure case on line 131 being console.error is appropriate, but the success case should not be.

Impact: Every successful MCP tool call that piggybacks inbox data will generate a spurious error log. In production, this will trigger false alerts and make it harder to find real errors in log aggregation tools.

Suggested change

	console.error('[piggyback] inbox fetch ok — channels=%d mentions=%d dms=%d reactions=%d',
	console.debug('[piggyback] inbox fetch ok — channels=%d mentions=%d dms=%d reactions=%d',

---

Was this helpful? React with 👍 or 👎 to provide feedback.