diff --git a/src/cli.ts b/src/cli.ts
index e1ea9757..28f7c761 100644
--- a/src/cli.ts
+++ b/src/cli.ts
@@ -1716,6 +1716,13 @@ function buildDemoSessions(): DemoSession[] {
   ];
 }
 
+function jsonAuthHeaders(): Record<string, string> {
+  const headers: Record<string, string> = { "Content-Type": "application/json" };
+  const secret = process.env["AGENTMEMORY_SECRET"];
+  if (secret) headers["Authorization"] = `Bearer ${secret}`;
+  return headers;
+}
+
 async function postJson<T = unknown>(
   url: string,
   body: unknown,
@@ -1724,7 +1731,7 @@ async function postJson<T = unknown>(
   try {
     const res = await fetch(url, {
       method: "POST",
-      headers: { "Content-Type": "application/json" },
+      headers: jsonAuthHeaders(),
       body: JSON.stringify(body),
       signal: AbortSignal.timeout(timeoutMs),
     });
@@ -1742,7 +1749,7 @@ async function postJsonStrict<T = unknown>(
 ): Promise<T | null> {
   const res = await fetch(url, {
     method: "POST",
-    headers: { "Content-Type": "application/json" },
+    headers: jsonAuthHeaders(),
     body: JSON.stringify(body),
     signal: AbortSignal.timeout(timeoutMs),
   });