v0.2.0
API-key authentication: identity reads + opt-in run submission & moderation
v0.1.0 was read-only and keyless. v0.2.0 adds optional speedrun.com API-key support, fully opt-in.
Without a key (unchanged)
All public read tools work exactly as before — no account, no setup.
With SPEEDRUN_API_KEY (read-only by default)
whoami,list_notifications— identity reads- The write tools become visible but stay disabled; calling one explains how to enable writes
With SPEEDRUN_ENABLE_WRITES=1 (read-write)
submit_run,verify_run,reject_run,set_run_players,delete_run
Security
- Key is read only from the environment, never a tool argument
- Read-only is the default; writes require a separate, explicit flag
- All tools carry MCP read-only / destructive annotations
See the README's Authenticated features section for setup.