A warrant-gated FastMCP server on browserid-mcp-auth — no API keys. Authority is a human's scoped, revocable warrant; every tool call is attributed, and a revoke at https://browserid.me/account kills the agent's next call.
OAuth: /.well-known/oauth-protected-resource · /.well-known/oauth-authorization-server · POST /token. Tools: log_action (scope demo:write), read_log.