How Does Pipedream Authenticate and Distinguish Me Without an API Key for Rapid7 IVM in Windsurf Configuration?

Help
1

This topic was automatically generated from Slack. You can find the original thread here.

Hi, I’m Hisashi, based in Tokyo, very new to Pipedream. I’m trying to integrate my Rapid7 Insight VM through Pipedream with my Windsurf. The guide tells me that I don’t need to set my API Key for Rapid7 IVM for my Windsurf configuration JSON, but how can it distinguish me and authenticate to Rapid7 IVM? Apologies for this dumb, fundamental question, but I need help.

2

Based on the first screenshot, it looks like you already added your API key to Pipedream directly, via a popup when you clicked “Connect Account”, right?

3

Then when you add https://mcp.pipedream.net/v1 to Windsurf, you should get prompted to connect to Pipedream, which will then pull down your connected accounts, including the Rapid7 account you connected.

4

Thanks for the quick follow-up . I’m testing with my Gemini CLI, and getting an authentication error with Pipedream oauth server. I’m guessing the redirect uri, http://localhost…, is not registered on Pipedream side properly. If you can have a look at the video attached and give me possible causes and workarounds, that would be appreciated. Here comes my .gemini/settings.json.

{
"mcpServers": {
"threatstream": {
"command": "npx",
"args": [
"mcp-remote",
"https://optic.threatstream.com/mcp",
"--header",
"Authorization:${AUTH_HEADER}"
],
"env": {
"AUTH_HEADER": "Api-Key xxxx"
}
},
"cloudflare-observability": {
"command": "npx",
"args": [
"mcp-remote",
"https://observability.mcp.cloudflare.com/sse"
]
},
"pipedream": {
"url": "https://mcp.pipedream.net/v2"
}
}
}

5

If their CLI doesn’t support OAuth with dynamic client registration, you might want to try this route: Develop with Pipedream MCP - Pipedream