Every owner tool this token may call (the same ones /mcp lists to it): name, title, description, annotations, and inputSchema, the JSON Schema of its arguments. Also instructions, the rules MCP clients get at initialize (follow them: which fields are untrusted data, which links are Daycal's, previewing before a push), and prompts, the MCP prompts as text (setup: first-time setup step by step)