Function looksLikeJwt

apps/cloud/src/auth/workos-auth-provider.ts:116–116

(token: string)

// token from the CLI device-login); anything else is treated as an API key.
// Same discriminator the MCP plane uses (`mcp/auth.ts`).
const looksLikeJwt = (token: string): boolean => token.split(".").length === 3;

/**
 * Resolve a WorkOS device-login (user_management) access token into a protected