fix: apply AUTH_REQUIRED flag to mcp endpoints

Signed-off-by: Tomas Pilar <[email protected]>

Author: pilartomas

mcpgateway/main.py

@@ -448,9 +448,10 @@ async def __call__(self, scope, receive, send):
             return
 
         # Call auth check first
-        auth_ok = await streamable_http_auth(scope, receive, send)
-        if not auth_ok:
-            return
+        if settings.auth_required:
+            auth_ok = await streamable_http_auth(scope, receive, send)
+            if not auth_ok:
+                return
 
         original_path = scope.get("path", "")
         scope["modified_path"] = original_path