Summary
src/auth.ts:9 defaults WAVE_BASE_URL to https://wave.online, a host that 404s on /api/v1/*. Every one of this package's 18 published tools targets a host that does not serve the API: no scope check, no metering, no x402, no successful call, ever, with default configuration.
Where
src/auth.ts:9 — DEFAULT_BASE_URL = "https://wave.online" (or equivalent constant name; grep WAVE_BASE_URL default in src/auth.ts).
Live receipts
https://wave.online/api/v1/streams → 404
https://wave.online/settings/api-keys → 404 (the package's own key-minting error URL, src/auth.ts:17)
The correct API host is https://api.wave.online — confirmed live and serving /v1/* correctly (see the receipts in the sibling wave-gateway issues filed alongside this one).
Affected tools (all 18)
wave_{create,list}_stream(s), wave_{start,stop}_stream, wave_get_stream_{health,metrics}, wave_get_viewers, wave_create_clip, wave_mark_highlight, wave_{create,list}_production(s), wave_control_camera, wave_switch_camera, wave_show_graphic, wave_moderate_chat, wave_start_captions, wave_get_{usage,subscription}.
Proposed fix
- Change the default
WAVE_BASE_URL in src/auth.ts:9 to https://api.wave.online.
- Repoint the key-minting error URL (
src/auth.ts:17, currently wave.online/settings/api-keys → 404) at console.wave.online/dashboard#keys.
Note
This package is published to npm (@wave-av/mcp-server). A code fix alone does not remediate installed copies — this needs a version bump and republish once merged, and ideally a note in the package README / changelog since every existing install is silently broken.
Summary
src/auth.ts:9defaultsWAVE_BASE_URLtohttps://wave.online, a host that 404s on/api/v1/*. Every one of this package's 18 published tools targets a host that does not serve the API: no scope check, no metering, no x402, no successful call, ever, with default configuration.Where
src/auth.ts:9—DEFAULT_BASE_URL = "https://wave.online"(or equivalent constant name; grepWAVE_BASE_URLdefault insrc/auth.ts).Live receipts
The correct API host is
https://api.wave.online— confirmed live and serving/v1/*correctly (see the receipts in the siblingwave-gatewayissues filed alongside this one).Affected tools (all 18)
wave_{create,list}_stream(s),wave_{start,stop}_stream,wave_get_stream_{health,metrics},wave_get_viewers,wave_create_clip,wave_mark_highlight,wave_{create,list}_production(s),wave_control_camera,wave_switch_camera,wave_show_graphic,wave_moderate_chat,wave_start_captions,wave_get_{usage,subscription}.Proposed fix
WAVE_BASE_URLinsrc/auth.ts:9tohttps://api.wave.online.src/auth.ts:17, currentlywave.online/settings/api-keys→ 404) atconsole.wave.online/dashboard#keys.Note
This package is published to npm (
@wave-av/mcp-server). A code fix alone does not remediate installed copies — this needs a version bump and republish once merged, and ideally a note in the package README / changelog since every existing install is silently broken.