harmony-cf

MCP endpoint: POST /mcp (JSON-RPC 2.0). Bearer token required (2 principals allowlisted).

OAuth metadata is served at /.well-known/oauth-authorization-server for SDK probe compatibility, but no flow endpoints are advertised; v1 authentication is pre-shared bearer.