MCP OAuth
A machine-only authorization server for your MCP resource server — not for LIME site-login.
01
Your service reads the authorization server metadata — where to get a token and which public keys to trust.
02
The agent exchanges its Agent Token for a short-lived passport bound to your domain.
03
Your MCP server verifies the passport on its own, with public keys. No call to LIME.