How does this work for access controlled data ? I don't see how to pass auth credentials?

Required for

- corporate data sources, e g. Salesforce

- APIs with key limits and non-trivial costs

- personal data sources e.g. email

It appears that all auth is packed into the MCP config, e.g. slack token: https://github.com/modelcontextprotocol/servers/tree/main/sr...