desktop-custom-connector-requires-oauth2-dcr-not-bearer

Claude Desktop Custom Connectors require OAuth 2.0 Dynamic Client Registration (MCP spec 2025-03-26). When a server returns 401 on /mcp, Desktop tries /.well-known/oauth-authorization-server, /oauth/authorize, /oauth/token — if none respond, it gives ‘You are not connected yet’ and never sends the actual Bearer token. Static Bearer auth is protocol-incompatible with Desktop connectors; only public (no-auth) or OAuth 2.0 servers can be bridged. Servers with static Bearer tokens must stay VPS-permanent.