Filter MCP server.
POST /mcp with an Authorization: Bearer <token> header.