The MCP endpoint.

Authentication is the ordinary API-key stack, so a key minted in the dashboard works here with no extra concept to learn. Permissions are empty because the marketplace permission resolves a product from the view, and this view serves whichever product the key covers — the check happens in _gate instead.