OAuth 2.1 broker and Streamable-HTTP MCP endpoint.
POST JSON-RPC 2.0 to this URL with a Bearer access token. OAuth metadata at /.well-known/oauth-authorization-server.
/.well-known/oauth-authorization-server