This part walks through the MCP authorization specification, revision 2026-07-28, as an implementer would meet it: what to discover, how to register, how to get a token, and what the server must check. Every requirement here comes from the spec or from the RFCs it cites.