Private MCP endpoint at /mcp.