number
Session lifetime (default 15 min, max 24h).
{ id, expires_at, mcp: { url, headers, expires_at } }. The bearer is in
mcp.headers.Authorization, never the URL. See Sessions.Sessions
Create Session
POST /v1/users/:user_id/sessions — TTL’d per-user MCP session.