docs: updated mcp tools

app/src/App.ts

@@ -311,8 +311,9 @@ export class App<
          throw new Error("MCP is not enabled");
       }
 
+      const url = new URL(config.path, "http://localhost").toString();
       return new McpClient({
-         url: "http://localhost" + config.path,
+         url,
          fetch: this.server.request,
       });
    }

app/src/modules/server/SystemController.ts

@@ -70,12 +70,13 @@ export class SystemController extends Controller {
       if (!config.mcp.enabled) {
          return;
       }
-      const { permission } = this.middlewares;
+      const { permission, auth } = this.middlewares;
 
       this.registerMcp();
 
       app.server.all(
          config.mcp.path,
+         auth(),
          permission(SystemPermissions.mcp, {}),
          mcpMiddleware({
             setup: async () => {