From af67bc8592485ca25fcdf6752839754304f6bfb6 Mon Sep 17 00:00:00 2001
From: 0ln <8427756+0ln@users.noreply.github.com>
Date: Tue, 27 Jan 2026 03:58:55 +0100
Subject: [PATCH] fix(mcp): add optional Context7 `Authorization` header
 (#1133)

Context7 should mirror `websearch` by only sending auth when
`CONTEXT7_API_KEY` is set.

Change: set bearer auth in `headers` using `CONTEXT7_API_KEY` if said environment variable is set, otherwise leave `headers` to `undefined`.
---
 src/mcp/AGENTS.md   | 5 +++--
 src/mcp/context7.ts | 4 ++++
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/src/mcp/AGENTS.md b/src/mcp/AGENTS.md
index 9d38a1b2..f634bc49 100644
--- a/src/mcp/AGENTS.md
+++ b/src/mcp/AGENTS.md
@@ -21,7 +21,7 @@ mcp/
 | Name | URL | Purpose | Auth |
 |------|-----|---------|------|
 | websearch | mcp.exa.ai/mcp?tools=web_search_exa | Real-time web search | EXA_API_KEY |
-| context7 | mcp.context7.com/mcp | Library docs | None |
+| context7 | mcp.context7.com/mcp | Library docs | CONTEXT7_API_KEY |
 | grep_app | mcp.grep.app | GitHub code search | None |
 
 ## THREE-TIER MCP SYSTEM
@@ -61,4 +61,5 @@ const mcps = createBuiltinMcps(["websearch"])  // Disable specific
 
 - **Remote only**: HTTP/SSE, no stdio
 - **Disable**: User can set `disabled_mcps: ["name"]` in config
-- **Exa**: Requires `EXA_API_KEY` env var
+- **Context7**: Optional auth using `CONTEXT7_API_KEY` env var
+- **Exa**: Optional auth using `EXA_API_KEY` env var
diff --git a/src/mcp/context7.ts b/src/mcp/context7.ts
index e0649137..4843e28f 100644
--- a/src/mcp/context7.ts
+++ b/src/mcp/context7.ts
@@ -2,5 +2,9 @@ export const context7 = {
   type: "remote" as const,
   url: "https://mcp.context7.com/mcp",
   enabled: true,
+  headers: process.env.CONTEXT7_API_KEY
+    ? { Authorization: `Bearer ${process.env.CONTEXT7_API_KEY}` }
+    : undefined,
+  // Disable OAuth auto-detection - Context7 uses API key header, not OAuth
   oauth: false as const,
 }