- Persist whether the desktop MCP server requires a bearer token - Start localhost MCP without a generated token when authentication is disabled - Warn in Settings and require a server restart to apply the preference