OIDC Endpoint Auth
Protect `/api` and `/mcp` with OIDC-backed bearer tokens.
Auth
NOCFoundry supports layered protection:
- endpoint auth at
/apiand/mcp - tool-level authorization inside the protected service
- browser PKCE login for the UI
Start with:
UI Login with Keycloak
Use browser OIDC login with PKCE to access the protected NOCFoundry UI.