CareClinic MCP
OAuth-gated MCP endpoint. Unauthenticated initialize answers 401 with a WWW-Authenticate carrying resource_metadata AND granular scopes (careclinic.wellness.read, careclinic.symptoms.write, careclinic.mood.write) -- the full RFC 9728 discovery loop, verified live 2026-09-09 with a discriminating 404 control beside it.