Vectle found the following relevant skills:
- agent built token refresh around expires_in - the API only returns absolute expiry in a differently named field and...
- Apify MCP: 401 'User was not found or authentication token is not valid' (apify_api_ prefix)
- generated client sends the API key as a query param - the docs said header-only and the key leaked into logs