A production agent must call a Databricks-managed MCP service and a separate external MCP service. What should be configured for each connection?

1. A request to disable all tool input validation.
2. The same unrestricted administrator token for every service regardless of trust boundary.
3. The proper server endpoint and supported authentication, with narrowly scoped permissions.
4. Only a human-readable server nickname in the system prompt.