Merge branch 'feat/base-to-base-sync'

Author: ARHAEEM

packages/mcp-server/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 ## [Unreleased]
 
+### Added (2026-07-31 daemon — secret-URL token for claude.ai custom connectors)
+
+- **Daemon accepts the bearer token as `?token=` in the URL.** claude.ai custom connectors
+  support only OAuth or no-auth — there is no header field, so a bearer-only server made
+  Claude attempt OAuth discovery/registration against endpoints that don't exist
+  ("Couldn't register with …'s sign-in service"). `requireBearer` now also checks
+  `req.query.token` (same secret, same timing-safe compare, 401-burst tripwire unchanged),
+  so a tunnel URL like `https://<host>/mcp?token=<bearer>` connects as a no-auth connector —
+  the Zapier/n8n secret-URL pattern. Requests that present a query token get
+  `Referrer-Policy: no-referrer` + `Cache-Control: no-store` so the URL never leaks via
+  referrer or cache. The token rides the URL, so treat the URL as the secret (edge/proxy
+  access logs will see it); `manage_daemon action=token_rotate` invalidates it.
+
 ### Fixed (2026-07-30 review finish — diff detail id, autoNumber update path, test isolation)
 
 - **`sync_base mode=diff` with `detail` but no `diffId` returned `diffId:null` on success.**

packages/mcp-server/README.md

@@ -684,6 +684,11 @@ do not need to change their configuration when the daemon is present.
 
 The daemon stores its port and bearer token in `~/.airtable-user-mcp/daemon.lock`.
 
+Clients that cannot send an `Authorization` header — e.g. claude.ai custom connectors, which
+only support OAuth or no-auth — can pass the token in the URL instead:
+`https://<tunnel-host>/mcp?token={token}`. The URL then IS the secret: share it only with the
+client, and rotate via `manage_daemon action=token_rotate` if it leaks.
+
 ## Protocol
 
 | | |

packages/mcp-server/src/daemon/server.js

@@ -358,7 +358,17 @@ export async function startDaemonServer(options = {}) {
     const header = req.headers?.authorization ?? '';
     const match = header.match(/^Bearer\s+(.+)$/i);
     const provided = match ? match[1] : null;
-    if (!tokensMatch(provided, currentToken.bearerToken)) {
+    // Claude.ai custom connectors can't send an Authorization header (OAuth or
+    // no-auth only), so the token may ride the URL instead: /mcp?token=<bearer>.
+    // Same secret, same timing-safe compare — the Zapier/n8n secret-URL pattern.
+    const queryToken = typeof req.query?.token === 'string' ? req.query.token : null;
+    if (queryToken !== null) {
+      // The URL carries the secret on this path — keep it out of referrers and caches.
+      res.setHeader('Referrer-Policy', 'no-referrer');
+      res.setHeader('Cache-Control', 'no-store');
+    }
+    if (!tokensMatch(provided, currentToken.bearerToken)
+      && !tokensMatch(queryToken, currentToken.bearerToken)) {
       track401Burst(req);  // 401-burst tripwire (D-06)
       const wantHtml = (req.headers?.accept ?? '').includes('text/html');
       if (wantHtml) {

packages/mcp-server/test/test-daemon-server.test.js

@@ -102,6 +102,23 @@ describe('GET /daemon/health', () => {
     const body = await response.json();
     assert.strictEqual(body.error, 'Unauthorized');
   });
+
+  it('accepts the token as ?token= query param (claude.ai secret-URL path)', async () => {
+    const response = await fetch(
+      `http://127.0.0.1:${server.port}/daemon/health?token=${encodeURIComponent(server.bearerToken)}`
+    );
+    assert.strictEqual(response.status, 200);
+    const body = await response.json();
+    assert.strictEqual(body.ok, true);
+    // Secret rode the URL — response must be uncacheable and never leak via Referer.
+    assert.strictEqual(response.headers.get('referrer-policy'), 'no-referrer');
+    assert.strictEqual(response.headers.get('cache-control'), 'no-store');
+  });
+
+  it('returns 401 when ?token= is wrong', async () => {
+    const response = await fetch(`http://127.0.0.1:${server.port}/daemon/health?token=wrong-token`);
+    assert.strictEqual(response.status, 401);
+  });
 });
 
 describe('GET /daemon/session-health', () => {