Thanks for the pointer. The hybrid L402 + Bearer approach is worth studying — curious how invinoveritas handles token revocation and whether the Bearer fallback undermines the macaroon-based attenuation that makes L402 useful. Will take a look at the MCP endpoint.