Skip to content

fix: restore quickstart page, accept AAO API keys on test agent#1686

Merged
bokelley merged 2 commits into
mainfrom
bokelley/fix-quickstart-link
Mar 25, 2026
Merged

fix: restore quickstart page, accept AAO API keys on test agent#1686
bokelley merged 2 commits into
mainfrom
bokelley/fix-quickstart-link

Conversation

@bokelley

Copy link
Copy Markdown
Contributor

Summary

  • Restore docs/quickstart.mdx (deleted in Restructure docs nav, introduce Sage as protocol identity #1509 nav restructure) with wire-format examples verified against the live training agent
  • Add WorkOS API key validation to training agent so AAO dashboard keys (sk_/wos_api_key_ prefix) work as bearer tokens
  • Remove hardcoded PUBLIC_TEST_AGENT_TOKEN fallback from source (env-var only)
  • Strip exposed p6IQ token from all current docs, replace with $ADCP_AUTH_TOKEN env var references

Closes #1576

Test plan

  • Stood up local server (postgres + training agent), tested all 4 quickstart curl commands
  • Verified get_products response shape including pricing_option_id
  • Verified create_media_buy with correct account, budget (number), start_time, end_time
  • Verified error response (isError: true with code/message)
  • Verified auth rejection with wrong token returns clear error message
  • TypeScript compiles clean, 192 training agent tests pass
  • Pre-commit hooks pass (all test suites, docs nav validation, schema validation)
  • Pre-push hooks pass (Mintlify broken link check, version sync, accessibility)

Follow-ups

  • Rotate PUBLIC_TEST_AGENT_TOKEN env var in production (the p6IQ value is compromised)
  • dist/ versioned snapshots still contain the old token (build artifacts, not source of truth)

🤖 Generated with Claude Code

bokelley and others added 2 commits March 25, 2026 16:42
- Restore docs/quickstart.mdx (deleted in #1509) with wire-format
  examples tested against the live training agent: MCP tool call,
  error handling, create_media_buy, and push notifications
- Add WorkOS API key validation to training agent auth so AAO
  dashboard keys work as bearer tokens for direct access
- Remove hardcoded PUBLIC_TEST_AGENT_TOKEN fallback from source
- Strip exposed p6IQ token from all current docs, replace with
  $ADCP_AUTH_TOKEN env var references

Closes #1576

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@bokelley bokelley merged commit cabd1e4 into main Mar 25, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Quickstart: make-your-first-AdCP-call-in-5-minutes page

1 participant