Verified against the live Virgo dev instance while testing Sophia: with no
bearer token, Hecate answers 401, fast-agent reads that as an auth
challenge and falls back to OAuth dynamic client registration, then blocks
waiting for a browser callback on 127.0.0.1:3030 that never arrives on a
headless host. The agent never finishes starting — so a missing PAT is a
startup failure, not a per-tool one. Same trap as the Daedalus MCP server.
Also noted that /mcp answers 307 to /mcp/, so the trailing slash avoids a
redirect on every call.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Robert Helewka
616d7580a2