MCP authentication

The MCP server is a resource server. It validates the bearer token and applies the same scopes and autonomy as REST.

Missing bearer on a protected tool is HTTP 401, not a successful tool result.

Public tools are listed in the quickstart.