mcp --http: one Streamable HTTP server for every session (token or OAuth introspection auth, project argument per call, roots, origin check)

cli/data/flags.json

@@ -645,7 +645,21 @@
    "to",
    "translate"
   ],
-  "mcp": [],
+  "mcp": [
+   "allow-origin",
+   "allow-remote-token",
+   "auth",
+   "host",
+   "http",
+   "introspect-key-file",
+   "introspect-url",
+   "issuer",
+   "port",
+   "project",
+   "resource",
+   "roots",
+   "token-file"
+  ],
   "onboard": [
    "accounts",
    "all",
@@ -1159,7 +1173,9 @@
    "allow-availability-changes",
    "allow-device-gap",
    "allow-existing",
+   "allow-origin",
    "allow-price-changes",
+   "allow-remote-token",
    "allow-ssh",
    "allow-stale-web",
    "allow-version-mismatch",
@@ -1172,6 +1188,7 @@
    "apps",
    "archive",
    "aso",
+   "auth",
    "base",
    "base-url",
    "beta",
@@ -1243,6 +1260,8 @@
    "headless",
    "home",
    "hook",
+   "host",
+   "http",
    "icon",
    "icons",
    "identity",
@@ -1251,9 +1270,12 @@
    "install",
    "internal",
    "internal-only",
+   "introspect-key-file",
+   "introspect-url",
    "invite",
    "ios",
    "issue",
+   "issuer",
    "issues",
    "jobs",
    "keep",
@@ -1350,10 +1372,12 @@
    "render",
    "repair-stuck",
    "resolve-iaps",
+   "resource",
    "result-file",
    "resume",
    "review-sent",
    "root",
+   "roots",
    "scan-paths",
    "scenes",
    "scheduled",
@@ -1387,6 +1411,7 @@
    "threshold",
    "timeout",
    "to",
+   "token-file",
    "top",
    "track",
    "tracking-domains",