Debugging a 401 From a Remote MCP Server

A 401/403 from a remote MCP server is one of two very different things: a healthy server asking for a credential, or a broken auth config. How to tell them apart from the outside, what causes the 401, and why an auth-gated server is "degraded," not "down."