A company hosts an internal MCP server over HTTP so that engineers' Claude clients can query a customer database. Today every engineer's config contains the same long-lived shared API key, so the server cannot tell users apart, and revoking one person's access means rotating the key for everyone. The security team wants per-user identity, short-lived credentials, and scoped access, in line with the MCP specification. Which design fits?