Local and remote, both supervised
Local servers run as child processes over stdio, with restart and backoff, a concurrency limit, and a per-call timeout. Remote ones connect over streamable HTTP with OAuth; tokens land in the OS keychain and never reach the interface. The older HTTP+SSE transport isn't supported.