ccf MCP OAuth gateway — connect via /mcp