Skip to content

v0.2.0

Choose a tag to compare

@williamcodes williamcodes released this 22 Jun 16:38
· 22 commits to main since this release

API-key authentication: identity reads + opt-in run submission & moderation

v0.1.0 was read-only and keyless. v0.2.0 adds optional speedrun.com API-key support, fully opt-in.

Without a key (unchanged)

All public read tools work exactly as before — no account, no setup.

With SPEEDRUN_API_KEY (read-only by default)

  • whoami, list_notifications — identity reads
  • The write tools become visible but stay disabled; calling one explains how to enable writes

With SPEEDRUN_ENABLE_WRITES=1 (read-write)

  • submit_run, verify_run, reject_run, set_run_players, delete_run

Security

  • Key is read only from the environment, never a tool argument
  • Read-only is the default; writes require a separate, explicit flag
  • All tools carry MCP read-only / destructive annotations

See the README's Authenticated features section for setup.