description Configure Keycloak as the authorization server for an MCP server — audience binding, scopes, PKCE, client registration — with every failure mode tested on Keycloak 26.8.0. To secure an MCP ...