Authentication, session management, etc, should be handled outside of the standard, and outside of the LLM flow entirely.
I recently mused on these here; https://github.com/sunpazed/agent-mcp/blob/master/mcp-what-i...