Skip to content

docs(drift): draft from internal source - #444

Open
pedromcunha wants to merge 1 commit into
mainfrom
docs-drift/src-49ad972807-d08bc9a
Open

docs(drift): draft from internal source#444
pedromcunha wants to merge 1 commit into
mainfrom
docs-drift/src-49ad972807-d08bc9a

Conversation

@pedromcunha

Copy link
Copy Markdown
Member

Drafted from an internal source repo, requested by @Frizellle.

This PR was auto-generated by the reusable-docs-draft-pr workflow from a Claude-drafted update in the source repo. It is opened as a draft — please review, edit as needed, and mark ready for review before merging.

Review checklist

  • Content matches the behavior shipped in the source PR
  • No internal-only details (service names, file paths, unreleased names, security internals) leaked into the draft
  • Conforms to CLAUDE.md style rules
  • Cross-references and internal links resolve
  • Any Needs human input items from the source comment are addressed

Generated by reusable-docs-draft-pr.yml in relayprotocol/agents-config.

Requested by @Frizellle via /publish-docs-pr
@mintlify

mintlify Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

Preview deployment for your docs. Learn more about Mintlify Previews.

Project Status Preview Updated (UTC)
unevenlabs 🟢 Ready View Preview Sep 2, 2026, 10:06 PM

💡 Tip: Enable Automations to automatically generate PRs for you.

@greptile-apps

greptile-apps Bot commented Sep 10, 2026

Copy link
Copy Markdown

RetriggerConfidence Score: 3/5

Not safe to merge until the quote example uses the documented API-key header and the new Route Racing guide is reachable from the Features navigation.

Findings

  1. P1 Wrong API-key header
  2. P1 Missing Route Racing navigation

Summary

  • This change adds Route Racing documentation and an API changelog entry. Validation confirmed that the quote example sends the API key through a header that does not apply key-scoped Route Racing access, and that the new guide is not included in the Features sidebar.

Reviews (1) · Last reviewed commit: "docs(drift): draft from internal source"

Comment thread features/route-racing.mdx
method: "POST",
headers: {
"Content-Type": "application/json",
"Authorization": `Bearer ${API_KEY}`,

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Route Racing API key is sent through the wrong header

The example uses Authorization: Bearer ${API_KEY}, but Relay API keys are supplied through x-api-key. The quote endpoint accepts the copied request as an unauthenticated public quote, which masks the issue; however, it cannot identify the key whose Route Racing grant should be applied. Use "x-api-key": API_KEY so copied integrations can opt into the key-scoped feature.

Artifacts

Route Racing API-key header validation source

  • Executable validation source posts the same route-racing quote payload with the copied Bearer header or the documented x-api-key header, using a non-secret invalid key; it provides the reproducible comparison.

Before response using the copied Authorization Bearer header

  • Captured execution of the copied documentation request against Relay quote v2, which returned HTTP/1.1 200 OK as a public quote; the takeaway is that acceptance does not apply a per-key grant.

After response using the documented x-api-key header

  • Captured execution of the same Relay quote v2 request with x-api-key, which returned HTTP/1.1 200 OK; the takeaway is that this is the documented channel for key-scoped behavior.

View artifacts

T-Rex Ran code and verified through T-Rex

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant