Bad examples only: http://mcp.example.invalid and https://user:token@mcp.example.invalid. Active mcp.json is clean.