Bearer Token Authentication
Definition
A bearer token is an opaque string the client sends as `Authorization: Bearer <token>`. The server validates it. Tokens must be kept out of logs, URLs, and tool arguments.
Best practices
Use short-lived tokens. Rotate regularly. Scope to minimum required permissions.