Model Context Protocol endpoint (JSON-RPC 2.0, stateless)

Single JSON-RPC 2.0 objects over POST; responses are JSON. Tools: remember, recall, recall_for_action, pending_confirmations, confirm, and scoped forget, with the same contract and scoping as the plain HTTP routes. Whole-partition erasure remains on the idempotent HTTP and console flows. Trusted backends use a cdb_ bearer key and explicit user_id. Marketplace clients use a revocable cmo_ OAuth token; their tool schemas omit user_id because the server derives it from the grant. Notifications return 202 with no body.