I'm running Content Cortex AI Services 26.0.0 (CCXAIServices CR) against a separately managed Content Cortex environment. Every query that needs real CPE data fails-Core MCP Server gets a 401 when it calls CPE's content-services/graphql API.

I've confirmed the credential itself is valid (tested it directly against CPE), so the problem seems to be in how Core MCP Server authenticates outbound to CPE, not the credential. It looks like it's attempting an OIDC/OAuth2 token exchange rather than using the credential directly, and I don't have a real identity provider set up for that-I also can't find anything in the CPE documentation that says one is required.

Has anyone set this up without an identity provider?