AIOProductOS MCP

1 of the 71 tools listed anonymously say in their own descriptions that they need an account or a key (capture_insight), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.

The server exposes a public surface before authorization: get_pm_playbook, whoami, pm_meta, get_product_brain, get_weekly_signal_memo, get_roadmap_drift, get_customer_360, analyze_nps, analyze_nrr, analyze_funnel, get_retention, analyze_paths, list_tasks, get_task, create_task, create_feature, create_objective, create_sprint, create_page, update_feature, update_objective, update_key_result, update_sprint, update_page, list_initiatives, create_initiative, update_initiative, list_ideas, create_idea, update_idea, vote_idea, promote_idea, create_release, update_release, create_experiment, update_experiment, list_decisions, create_decision, update_decision, delete_task, post_to_channel, reply_in_channel, reply_to_conversation, add_note, resolve_conversation, cancel_booking, reschedule_booking, review_artifact, list_artifact_versions, revert_to_version, update_task, comment_on_task, capture_insight, list_conversations, get_conversation, list_insights, list_features, list_objectives, list_experiments, list_releases, list_pages, get_page, get_codebase_map, list_sprints, list_channels, read_channel, list_bookings, get_device_candidates, list_identity_merges, merge_end_users, unmerge_end_users.