I think this is a step in the right direction. However, I would've loved if they'd make API keys in MCP a first class citizen versus oauth. It adds so much friction having to implement that in an app, just to get Codex to connect. Sure, for a full blown SaaS, it's OK, just a bunch of libraries to include and a new table to add to your user database, but just a drag if you just want to connect something quick, fast and quite secure.