"""

ZTA Paradigm based MCP Server Authentication Setup

1. OAuth2

  • Set environment variable OAUTH2_SECRET_KEY.
  • Send token in Authorization: Bearer <token> header.

2. Certificate-based Auth

  • Send client certificate via X-Client-Cert header (for mock testing).
  • For production, integrate with mTLS.

3. API Key Auth

  • Set env VALID_API_KEYS (comma-separated keys).
  • Send X-API-Key: <your_key> in the header. """