An MCP server protected by Cloudflare Access, validating JWTs to conditionally expose tools based on user identity.