AgentSmyth MCP Server
OAuth-protected remote Model Context Protocol endpoint served from the AgentSmyth Kong Enterprise gateway. An unauthenticated POST of an MCP tools/list request returns HTTP 401 with an RFC 9728 WWW-Authenticate challenge naming the protected-resource metadata document, which in turn names the WorkOS AuthKit authorization server. The tool set and its input schemas are behind that OAuth wall and were not read.