Good question. The host coordinates OAuth, usually opening the provider’s login page outside the iframe. It then sends the access token only to the MCP server. The embedded UI calls authenticated tools through the host, so the token itself is not exposed to the UI.