A teaching demo that implements JWT authentication and scope-based authorization for MCP tools, supporting role-based access to profile, notes, and admin operations.