fix:

Fixed some typos
Signed-off-by: Sun Yuhan <[email protected]>

Author: sunyuhan1998

docs/docs/learn/architecture.mdx

@@ -68,7 +68,7 @@ where it runs. MCP servers can execute locally or remotely. For example, when
 Claude Desktop launches the [filesystem
 server](https://github.com/modelcontextprotocol/servers/tree/main/src/filesystem),
 the server runs locally on the same machine because it uses the STDIO
-transport. This is commonly referred to as a "local" MCP server. The offical
+transport. This is commonly referred to as a "local" MCP server. The official
 [Sentry MCP server](https://docs.sentry.io/product/sentry-mcp/) runs on the
 Sentry platform, and uses the Streamable HTTP transport. This is commonly
 referred to as a "remote" MCP server.

docs/specification/2025-06-18/basic/authorization.mdx

@@ -367,7 +367,7 @@ A MCP server **MUST** follow the guidelines in [OAuth 2.1 - Section 5.2](https:/
 
 MCP servers **MUST** only accept tokens specifically intended for themselves and **MUST** reject tokens that do not include them in the audience claim or otherwise verify that they are the intended recipient of the token. See the [Security Best Practices Token Passthrough section](/specification/2025-06-18/basic/security_best_practices#token-passthrough) for details.
 
-If the MCP server makes requests to upstream APIs, it may act as an OAuth client to them. The access token used at the upstream API is a seperate token, issued by the upstream authorization server. The MCP server **MUST NOT** pass through the token it received from the MCP client.
+If the MCP server makes requests to upstream APIs, it may act as an OAuth client to them. The access token used at the upstream API is a separate token, issued by the upstream authorization server. The MCP server **MUST NOT** pass through the token it received from the MCP client.
 
 MCP clients **MUST** implement and use the `resource` parameter as defined in [RFC 8707 - Resource Indicators for OAuth 2.0](https://www.rfc-editor.org/rfc/rfc8707.html)
 to explicitly specify the target resource for which the token is being requested. This requirement aligns with the recommendation in