Connect a hosted assistant to your estate, on a consent you can take back
The MCP server that shipped in v0.12 accepted exactly one credential: a personal API token, in a header. That works for a client you run yourself — Claude Code, the CLI — and it cannot work for a hosted one, which has no way to be handed a token you minted. Which is to say it could not serve the client the module's whole warning was written for.
The hub can now act as an OAuth 2.1 authorization server.