MCP OAuth gateway: ok