Skip to content

[MCP] Enforce usage of caller-supplied API key#60

Merged
vm-serpapi merged 2 commits into
mainfrom
mcp/enforce-caller-supplied-key
Jul 7, 2026
Merged

[MCP] Enforce usage of caller-supplied API key#60
vm-serpapi merged 2 commits into
mainfrom
mcp/enforce-caller-supplied-key

Conversation

@vm-serpapi

Copy link
Copy Markdown
Member

Resolves serpapi/public-roadmap#3953

Changelog

Added enforcement of override of the caller-supplied API key. Also added tests to cover the override scenario.

@vm-serpapi vm-serpapi requested a review from adarshdigievo July 6, 2026 10:09

@adarshdigievo adarshdigievo left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @vm-serpapi

Confirmed that API key override no longer works after this update.

Also, I pushed a commit to the branch removing workers argument in uvicorn.run() in server.py to fix WARNING: You must pass the application as an import string to enable 'reload' or 'workers'..
This was preventing server start when the server was started directly (uv run src server.py). The Dockerfile remains unchanged.

Comment thread src/server.py
@vm-serpapi vm-serpapi merged commit f672053 into main Jul 7, 2026
2 checks passed
@vm-serpapi vm-serpapi deleted the mcp/enforce-caller-supplied-key branch July 7, 2026 14:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

serpapi-mcp API Key Override

2 participants