Skip to content

Basic Auth support? #12

Description

@kevinmichaelchen

Looks like basic auth isn't supported.

DeepWiki session

No, basic auth is not supported. The system supports Bearer token authentication and OAuth authentication instead. 1 2

Authentication Methods

Bearer Token (API Keys)

All API requests require authentication using a Bearer token in the Authorization header: 3

Authorization: Bearer YOUR_API_KEY

API keys can be obtained from the Developer Platform and start with sm_ prefix. 4

OAuth

The system also supports OAuth authentication, which is the default method for MCP server connections. The client discovers the authorization server via /.well-known/oauth-protected-resource and prompts for authentication. 5

Security Scheme

All API endpoints define bearerAuth as the security scheme using HTTP Bearer token type: 6

Notes

Basic authentication (using Authorization: Basic base64(username:password)) is not mentioned anywhere in the documentation or API specifications. The system exclusively uses Bearer tokens for API key authentication and OAuth for user authentication flows.

Wiki pages you might want to explore:

Citations

File: docs/docs/authentication.md (L14-16)

## API Keys

All API requests require authentication using a Bearer token. Get your API key from the [Developer Platform](https://console.supermemory.ai).

File: docs/docs/authentication.md (L20-28)

Include your key in all requests:

<CodeGroup>
  ```bash cURL theme={null}
  curl https://api.supermemory.ai/v3/search \
    --header 'Authorization: Bearer YOUR_API_KEY' \
    --header 'Content-Type: application/json' \
    -d '{"q": "hello"}'

**File:** docs/docs/supermemory-mcp/setup.md (L36-55)
```markdown
The server uses **OAuth authentication** by default. Your MCP client will automatically discover the authorization server via `/.well-known/oauth-protected-resource` and prompt you to authenticate.

## API Key Authentication (Alternative)

If you prefer to use an API key instead of OAuth, get one from [app.supermemory.ai](https://app.supermemory.ai) and pass it in the `Authorization` header:

```json theme={null}
{
  "mcpServers": {
    "supermemory": {
      "url": "https://mcp.supermemory.ai/mcp",
      "headers": {
        "Authorization": "Bearer sm_your_api_key_here"
      }
    }
  }
}

API keys start with sm_ and are automatically detected. When an API key is provided, OAuth authentication is skipped.


**File:** docs/docs/api-reference/connections/fetch-resources.md (L169-175)
```markdown
components:
  securitySchemes:
    bearerAuth:
      scheme: bearer
      type: http


---

</details>

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions