Zipline MCP Server
An OAuth-protected Model Context Protocol (MCP) endpoint published on Zipline's marketing site (getzipline.com), declared by the site's own RFC 9728 OAuth Protected Resource Metadata. The endpoint lives in the WordPress REST namespace (/wp-json/mcp/), so it exposes the marketing/content surface to MCP clients rather than the Zipline retail operations product. Authorization is OAuth 2.1 authorization-code with PKCE (S256) against getzipline.com, using the single scope "mcp". The live tool list could not be enumerated anonymously: the resource requires a bearer token and the host additionally returns a Cloudflare bot-management interstitial to non-browser clients.