Connect an MCP client to /mcp. OAuth opens a browser where each
user signs in to their own Willys account. Personnummer/Plus number, password,
and raw customer IDs are never persisted; functional cookies and customer
pseudonyms are encrypted at rest.
Read tools and guarded cart tools are available. Cart changes require the
optional willys.cart scope, operator opt-in, and confirmation.
Checkout, order placement, and payment are not implemented.