Protected MCP endpoint

Access requires authorization.