Security (MVP): require shared key via ?key= (with rotation)

[BleedingDev]

Goal

Prevent trivial abuse during MVP by requiring a shared key in requests.

What “Done” Means

• /suggest checks ?key= when keys are configured.
• Supports key rotation (multiple valid keys).
• Clear 401/403 behavior for missing/invalid key.

[coderabbitai]

📝 CodeRabbit Plan Mode

Generate an implementation plan and prompts that you can use with your favorite coding agent.

• Create Plan

Examples

• Example 1
• Example 2

---

🔗 Similar Issues

Possible Duplicates

• MVP access control: shared key (?key=) + rotation #8

👤 Suggested Assignees

• BleedingDev

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!