Set AgentOS(mcp_auth=...) to put standards-based OAuth in front of your /mcp endpoint. Instead of relying only on tokens, you can gate MCP access through a proper OAuth flow, so connecting clients authenticate the way the rest of your stack expects and you get a familiar, auditable path for granting and revoking access.
See cookbooks the for a working setup:
