Vanderhall Admin Portal MCP Server
An OAuth-protected Model Context Protocol endpoint served from the Vanderhall Admin Portal at https://portal.vanderhallusa.com/mcp. The endpoint is live and speaks JSON-RPC 2.0, but every method — including tools/list and initialize — returns -32001 "Unauthorized: missing bearer token" without a token, so the tool set and its input schemas are not publicly discoverable. Authorization is described by RFC 8414 authorization-server metadata and RFC 9728 protected-resource metadata at the portal's /.well-known/ paths: authorization code with PKCE (S256), dynamic client registration, refresh tokens, and a single scope, `mcp`.