(mcp auth is terrible btw)
Then I pass the stored oauth token directly to my (private) MCP servers alongside a bearer token.