v1.0.4 — Authorization: Bearer auth fix

v1.0.4 — Authorization: Bearer auth fix

Bug fix

• MCP server source updated from X-API-Key to Authorization: Bearer <key> (BUY-42672)
• The live API at api.buywhere.ai only accepts Bearer auth — X-API-Key was returning 401
• dist/index.js rebuilt with the auth fix
• Resolves the user-facing community issue BuyWhere/buywhere-mcp#18

Source changes

• src/index.ts lines 67, 88: "X-API-Key": API_KEY! → Authorization: \Bearer ${API_KEY!}``
• dist/index.js rebuilt
• package.json version: 1.0.3 → 1.0.4

Verified

• npm run typecheck clean
• npm run build succeeds
• mcp-publisher validate passes against the official MCP Registry schema

What ships automatically

• The Publish to MCP Registry workflow triggers on this release event
• It uses GitHub OIDC to authenticate and mcp-publisher publish
• This will make v1.0.4 discoverable in MCP client registries (Claude Desktop, Cursor, etc.)

What does NOT ship automatically

• npm publish still requires manual NPM_TOKEN (board action via BUY-43187)
• Until npm ships, users running npx -y @buywhere/mcp-server still get the old v0.3.11