Module routes 

Constants

BEARER_ONLY_ROUTER_FORBIDDEN_PATHS

Paths that must NOT be mounted by bearer_only_router — verified by the snapshot test. Headless MCP clients have no browser to complete a native-app OAuth flow with, so /native/callback//native/poll belong here alongside the browser-only/DCR-only endpoints.

BEARER_ONLY_ROUTER_PATHS

Pinned snapshot of the routes mounted by bearer_only_router. Sorted.

Functions

bearer_only_router

Bearer-only OAuth subset router for headless consumers.

router