Function bearerChallengeFor

apps/cloud/src/mcp/auth.ts:140–148

(
  result: McpUnauthorizedResult,
  organizationId: string | null = null,
  toolkitSlug: string | null = null,
)

 * an org in the URL (`/org_xxx/mcp`), else the bare document.
 */
export const bearerChallengeFor = (
  result: McpUnauthorizedResult,
  organizationId: string | null = null,
  toolkitSlug: string | null = null,
): string =>
  bearerChallenge(
    { reason: result.reason, description: result.description },
    protectedResourceMetadataUrlFor(organizationId, toolkitSlug),
  );

// ---------------------------------------------------------------------------
// Auth tags + Live layers