Authentication

Authentication verifies the identity of the server and users. The MCP server supports a dual model:

• Service account (SA)—Represents the server or automation identity.
• User credentials—Represents end-user context using tokens or JWTs.

Either or both models can be enabled. Scope-based filtering activates only when authentication is enabled.