authorize

The token is spelled either Authorization: Bearer <token> or ?token=<token> — not every MCP client can attach a custom header, and a url is the one thing all of them take. Both at once is Auth.AMBIGUOUS rather than a precedence rule: picking a winner would authorize under a token the caller may not have meant to send. Any Authorization header counts as that one, whatever it spells: reading past a malformed one to the url would authorize a request whose header half is broken.

The url value is never decoded — see urlTokenUsable.