From c3efe69b1bd34516b62633d8ed683a915b6fca29 Mon Sep 17 00:00:00 2001
From: Chris Christiansen <chris.christiansen@vauco.no>
Date: Sat, 5 Sep 2026 11:24:55 +0000
Subject: [PATCH] fix(hub): use X-MCP-Secret for tool calling

---
 agents/core-logic/agent.py      | 1 -
 agents/core-logic/root_agent.py | 5 ++++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/agents/core-logic/agent.py b/agents/core-logic/agent.py
index fdee84a..a31a226 100644
--- a/agents/core-logic/agent.py
+++ b/agents/core-logic/agent.py
@@ -88,7 +88,6 @@ def _identity_token() -> str:
 
 def _mcp_headers() -> dict:
     return {
-        "Authorization": f"Bearer {_identity_token()}",
         "X-MCP-Secret": _MCP_SECRET,
         "Content-Type": "application/json",
     }
diff --git a/agents/core-logic/root_agent.py b/agents/core-logic/root_agent.py
index b475097..8dea654 100644
--- a/agents/core-logic/root_agent.py
+++ b/agents/core-logic/root_agent.py
@@ -72,7 +72,10 @@ def _identity_token() -> str:
     return credentials.token
 
 def _mcp_headers() -> dict:
-    return {"Authorization": f"Bearer {_identity_token()}", "X-MCP-Secret": _MCP_SECRET, "Content-Type": "application/json"}
+    return {
+        "X-MCP-Secret": _MCP_SECRET,
+        "Content-Type": "application/json",
+    }
 
 import json
 ...