Skip to main content

​
Create a key

  1. Open DevTools account settings.
  2. Create an API key.
  3. Store it in your secrets manager.
  4. Inject it at runtime.

​
Key usage patterns

Use caseRequired headersNotes
Resource logsX-API-KeyIdentity is inferred from URL path ownership + key context
Unified MCPX-API-Key + X-User-UsernameUser-scoped capability checks
GitHub MCPX-API-Key + X-User-UsernameRequires connected GitHub account

​
MCP auth check

curl -sS https://mcp.alshival.ai/mcp/ \
  -H "Content-Type: application/json" \
  -H "X-API-Key: $ALSHIVAL_API_KEY" \
  -H "X-User-Username: $ALSHIVAL_USERNAME" \
  -d '{"jsonrpc":"2.0","id":"1","method":"tools/list","params":{}}'

​
Security requirements

  • Never commit keys to source control.
  • Use one key per deployed service.
  • Rotate keys immediately after exposure.