fix: change to x-scim-api-token

Signed-off-by: Hung-Han (Henry) Chen <[email protected]>

AGENTS.md

@@ -50,7 +50,7 @@ Creates a SCIM user resource by sending a POST request to the SCIM provider's `/
 
 **Required Headers**:
 
-- `x-scim-api-key`: Bearer token for SCIM API authentication
+- `x-scim-api-token`: Bearer token for SCIM API authentication
 - `x-scim-base-url`: Base URL of the SCIM provider
 
 **Parameters**: Full SCIM User resource including:
@@ -142,7 +142,7 @@ Required for SCIM operations:
 
 - Headers passed per-request (no env vars needed for auth)
 - SCIM credentials provided via HTTP headers:
-  - `x-scim-api-key`: API token/bearer token
+  - `x-scim-api-token`: API token/bearer token
   - `x-scim-base-url`: SCIM provider base URL
 
 ## Development Workflow

README.md

@@ -19,7 +19,7 @@ On Alpic
 ```toml
 [mcp_servers.scim]
 command = "npx"
-args = ["-y", "mcp-remote@latest", "https://scim-mcp-d8a54d7b.alpic.live/", "--header", "x-scim-api-key:${SCIM_AUTH_TOKEN}", "--header", "x-scim-base-url:https://service.provider.scim.base.url"]
+args = ["-y", "mcp-remote@latest", "https://scim-mcp-d8a54d7b.alpic.live/", "--header", "x-scim-api-token:${SCIM_AUTH_TOKEN}", "--header", "x-scim-base-url:https://service.provider.scim.base.url"]
 ```
 
 ## Development

src/resources/(groups)/[groupId]/index.ts

@@ -36,7 +36,7 @@ export default async function handler({
   const baseUrl = getScimBaseUrl(requestHeaders);
 
   if (!apiToken) {
-    throw new Error("Missing required headers: x-scim-api-key");
+    throw new Error("Missing required headers: x-scim-api-token");
   }
 
   if (!baseUrl) {

src/resources/(groups)/index.ts

@@ -41,7 +41,7 @@ export default async function handler({
   const baseUrl = getScimBaseUrl(requestHeaders);
 
   if (!apiToken) {
-    throw new Error("Missing required headers: x-scim-api-key");
+    throw new Error("Missing required headers: x-scim-api-token");
   }
 
   if (!baseUrl) {

src/resources/(users)/[userId]/index.ts

@@ -36,7 +36,7 @@ export default async function handler({
   const baseUrl = getScimBaseUrl(requestHeaders);
 
   if (!apiToken) {
-    throw new Error("Missing required headers: x-scim-api-key");
+    throw new Error("Missing required headers: x-scim-api-token");
   }
 
   if (!baseUrl) {

src/resources/(users)/index.ts

@@ -41,7 +41,7 @@ export default async function handler({
   const baseUrl = getScimBaseUrl(requestHeaders);
 
   if (!apiToken) {
-    throw new Error("Missing required headers: x-scim-api-key");
+    throw new Error("Missing required headers: x-scim-api-token");
   }
 
   if (!baseUrl) {

src/tools/addUserToGroup.ts

@@ -30,7 +30,7 @@ export default async function addUserToGroup(
   const baseUrl = getScimBaseUrl(requestHeaders);
 
   if (!apiToken) {
-    throw new Error("Missing required headers: x-scim-api-key");
+    throw new Error("Missing required headers: x-scim-api-token");
   }
 
   if (!baseUrl) {

src/tools/createGroup.ts

@@ -36,7 +36,7 @@ export default async function createGroup(
   const baseUrl = getScimBaseUrl(requestHeaders);
 
   if (!apiToken) {
-    throw new Error("Missing required headers: x-scim-api-key");
+    throw new Error("Missing required headers: x-scim-api-token");
   }
 
   if (!baseUrl) {

src/tools/createUser.ts

@@ -36,7 +36,7 @@ export default async function createUser(
   const baseUrl = getScimBaseUrl(requestHeaders);
 
   if (!apiToken) {
-    throw new Error("Missing required headers: x-scim-api-key");
+    throw new Error("Missing required headers: x-scim-api-token");
   }
 
   if (!baseUrl) {

src/tools/deleteGroup.ts

@@ -28,7 +28,7 @@ export default async function deleteGroup(
   const baseUrl = getScimBaseUrl(requestHeaders);
 
   if (!apiToken) {
-    throw new Error("Missing required headers: x-scim-api-key");
+    throw new Error("Missing required headers: x-scim-api-token");
   }
 
   if (!baseUrl) {

src/tools/deleteUser.ts

@@ -28,7 +28,7 @@ export default async function deleteUser(
   const baseUrl = getScimBaseUrl(requestHeaders);
 
   if (!apiToken) {
-    throw new Error("Missing required headers: x-scim-api-key");
+    throw new Error("Missing required headers: x-scim-api-token");
   }
 
   if (!baseUrl) {

src/tools/patchGroup.ts

@@ -31,7 +31,7 @@ export default async function patchGroup(
   const baseUrl = getScimBaseUrl(requestHeaders);
 
   if (!apiToken) {
-    throw new Error("Missing required headers: x-scim-api-key");
+    throw new Error("Missing required headers: x-scim-api-token");
   }
 
   if (!baseUrl) {

src/tools/patchUser.ts

@@ -31,7 +31,7 @@ export default async function patchUser(
   const baseUrl = getScimBaseUrl(requestHeaders);
 
   if (!apiToken) {
-    throw new Error("Missing required headers: x-scim-api-key");
+    throw new Error("Missing required headers: x-scim-api-token");
   }
 
   if (!baseUrl) {

src/tools/removeUserFromGroup.ts

@@ -30,7 +30,7 @@ export default async function removeUserFromGroup(
   const baseUrl = getScimBaseUrl(requestHeaders);
 
   if (!apiToken) {
-    throw new Error("Missing required headers: x-scim-api-key");
+    throw new Error("Missing required headers: x-scim-api-token");
   }
 
   if (!baseUrl) {

src/tools/replaceGroup.ts

@@ -31,7 +31,7 @@ export default async function replaceGroup(
   const baseUrl = getScimBaseUrl(requestHeaders);
 
   if (!apiToken) {
-    throw new Error("Missing required headers: x-scim-api-key");
+    throw new Error("Missing required headers: x-scim-api-token");
   }
 
   if (!baseUrl) {

src/tools/replaceUser.ts

@@ -31,7 +31,7 @@ export default async function replaceUser(
   const baseUrl = getScimBaseUrl(requestHeaders);
 
   if (!apiToken) {
-    throw new Error("Missing required headers: x-scim-api-key");
+    throw new Error("Missing required headers: x-scim-api-token");
   }
 
   if (!baseUrl) {

src/utils/getSCIMBaseUrl.ts

@@ -6,7 +6,7 @@ export function getScimBaseUrl(headers: Headers): string {
   if (process.env.SCIM_API_BASE_URL) {
     baseUrl = process.env.SCIM_API_BASE_URL;
   }
-  const baseUrlFromHeader = headers["x-scim-base-url"] || headers["X-SCIM-BASE-URL"];
+  const baseUrlFromHeader = headers["x-scim-base-url"];
   if (typeof baseUrlFromHeader === "string") {
     baseUrl = baseUrlFromHeader.trim();
   }

src/utils/getSCIMToken.ts

@@ -8,7 +8,7 @@ export function getScimToken(headers: Headers): string {
   if (process.env.SCIM_API_TOKEN) {
     token = process.env.SCIM_API_TOKEN;
   }
-  const tokenFromHeader = headers["x-scim-api-key"] || headers["X-SCIM-API-KEY"];
+  const tokenFromHeader = headers["x-scim-api-token"];
   if (typeof tokenFromHeader === "string") {
     token = tokenFromHeader.trim();
   }