OAuth for hosted agents: claude.ai Connectors, ChatGPT and Poke's OAuth mode can now use a self-hosted wazap. Set WAZAP_PUBLIC_URL and WAZAP_OAUTH_PASSWORD, give the agent the /mcp URL, and sign in on a consent page that asks read or read-and-send per agent. Discovery, dynamic client registration, PKCE, refresh and revoke are all in; bearer tokens keep working next to it. Grants live hashed in <data-dir>/oauth.json. Also a README section for serving from behind NAT through a tunnel. See CHANGELOG.md.