MCP authentication

Spectral MCP clients should authenticate with OAuth against https://auth.spectralco.co and connect to:

https://mcp.spectralco.co/mcp

OAuth Setup

Host-specific pages use these scopes:

mcp:models:read mcp:models:write

Use the MCP endpoint itself as the OAuth resource when the host asks for one:

https://mcp.spectralco.co/mcp

Use the Spectral authorization server metadata when host discovery needs an explicit issuer:

https://auth.spectralco.co/.well-known/oauth-authorization-server