thats how Amazon worked its MCP setup - got everything onto oauth tokens, and then the harness knows how to to access the token to get permissions to whatever the user has.

the bad part is setting separate permissions for different user tokens