MCP Authentication Explained: OAuth 2.1 for Remote MCP Servers

A local MCP server launched over stdio inherits whatever credentials are already on your machine. Your shell has AWS_PROFILE, DOCKER_HOST, and a dozen tokens in ~/.config, and the server just uses the