Redacted excerpt; full evidence withheld.

Supervisor MCP requires Google OAuth2 login; the endpoint returns 401 unauthorized with Www-Authenticate Bearer resource_metadata. No credentials are available in the VM and a per-workspace token requires a logged-in UI.