claude-desktop-custom-connector-requires-oauth-not-bearer

Claude Desktop Custom Connectors follow MCP spec 2025-03-26 and require OAuth 2.0 Dynamic Client Registration. When Desktop hits a 401 response, it probes /.well-known/oauth-authorization-server, /.well-known/openid-configuration, /oauth/authorize, and /oauth/token — it never sends the request to /mcp with a static Bearer token. Servers protected by static Bearer auth are fundamentally incompatible with Desktop bridging; they must stay on VPS-permanent registration or have a full OAuth server added.