---
title: MCP authentication
description: Bearer tokens on the MCP endpoint.
canonical: https://breezewish.com/developers/mcp/authentication
raw: https://breezewish.com/developers/mcp/authentication.md
apiVersion: v1
lastUpdated: 2026-10-18
category: MCP
---

# MCP authentication

The MCP server is a resource server. It validates the bearer token and applies the same scopes and autonomy as REST.

Missing bearer on a protected tool is HTTP 401, not a successful tool result.

Public tools are listed in [the quickstart](https://breezewish.com/developers/mcp/quickstart).