Store the Upstream Token in the Gateway, Not in Your MCP Config

When we first wired billing into the agent, the config looked like this: { "mcpServers": { "billing": { "command": "npx", "args": ["-y", "@powerduck/openapi-mcp-server", "serve", "--