{"id":"ship:bcc9b80f-0871-4ac6-b02b-54bad56b1dd6","withdrawn":false,"project":{"slug":"hashlock-tech-hashlock-mcp","name":"hashlock-mcp","url":"https://heyresearch.xyz/project/hashlock-tech-hashlock-mcp"},"domain":"build","claimType":"GITHUB_RELEASE","summary":"v0.1.8 — Bearer-compatible endpoint fix","sourceType":"github","sourceUrl":"https://github.com/Hashlock-Tech/hashlock-mcp/releases/tag/v0.1.8","publishedAt":"2026-04-24T12:25:09.000Z","detectedAt":"2026-10-13T00:34:57.904Z","precision":"EXACT","verification":"PUBLICLY_VERIFIED","countsAsBuilding":true,"recordedAt":"2026-10-13T00:34:57.904Z","metadata":{"summary":"## v0.1.8 — Bearer-compatible endpoint fix Fixes a default-endpoint regression introduced in v0.1.7 that made all unauthenticated stdio calls return `401 Unauthorized - missing api-token` for external MCP clients (Claude Desktop, Cursor, Windsurf, Raycast, anything not running inside a browser). ### Root cause Default `HASHLOCK_ENDPOINT` in v0.1.7 pointed at `https://hashlock.markets/api/graphql` — the **browser-only** Next.js SSR proxy that authenticates via the `httpOnly` `api-token` cookie set by `/sign/login`. External MCP clients do not maintain a cookie jar, so every Bearer-authenticated","releaseVersion":"v0.1.8","prerelease":false},"sources":[{"evidenceRowId":"f5b6b47f-0398-44f8-90af-6ff0c6143bfb","sourceType":"GITHUB_REPO","sourceUrl":"https://github.com/Hashlock-Tech/hashlock-mcp/releases/tag/v0.1.8","observedAt":"2026-10-13T00:34:57.904Z","metadata":{"tag":"v0.1.8","prerelease":false}}],"disclaimer":"Public, source-backed activity HEY recorded. Still Building means verified activity through a tracked market drawdown — it is not a prediction, not a ranking by price, and not investment advice. Few projects meet Still Building or Under the Radar at any time; both are strict by design, and list responses carry the counts."}