Clari MCP OAuth proxy. See /.well-known/oauth-protected-resource