hello-mcp — POST /mcp with a Bearer token. Metadata: /.well-known/oauth-protected-resource