Thanks for trying again, that helped me find the real problem. Littlebird checks for OAuth from its own servers, and those requests don’t send a browser user agent. NewsBlur blocks requests with no user agent to keep scrapers out, and that block was also catching the OAuth discovery files. So Littlebird never saw that NewsBlur supports OAuth and fell back to asking for an API token.
Those discovery files are now open to any client. Delete the server in Littlebird and add https://newsblur.com/mcp one more time. It should open a browser window to approve access this time. If it doesn’t, let me know and I’ll reach out to Littlebird directly.