Remote MCP over OAuth, no keys to manage.
The server speaks JSON-RPC 2.0 over HTTP and authenticates with OAuth 2.1 + PKCE. Your assistant opens a browser, you sign in once, and the client caches the token. Nothing to paste, nothing to rotate by hand.