Function unauthorized

apps/cloud/src/mcp/responses.ts:39–49

(auth: UnauthorizedAuth, protectedResourceMetadataUrl: string)

  jsonRpcErrorBody(status, code, message);

export const unauthorized = (auth: UnauthorizedAuth, protectedResourceMetadataUrl: string) =>
  HttpServerResponse.jsonUnsafe(
    { error: "unauthorized" },
    {
      status: 401,
      headers: {
        ...CORS_ALLOW_ORIGIN,
        "www-authenticate": bearerChallenge(auth, protectedResourceMetadataUrl),
      },
    },
  );