Cubby MCP Server
Cubby operates a hosted Model Context Protocol server at api.cubbystorage.com/mcp. The endpoint is live and OAuth-protected: an unauthenticated JSON-RPC tools/list call returns HTTP 401 with a WWW-Authenticate Bearer challenge pointing at the RFC 9728 protected-resource metadata document. The authorization server metadata advertises authorization-code and refresh-token grants, PKCE S256, dynamic client registration and a single `mcp` scope.