Inject credentials before publish, read the live token per HTTP request, and surface netx_token_missing instead of a silent 401.
Co-authored-by: Cursor <cursoragent@cursor.com>
Register tools from the preset standing mount so standard and other agents no longer see them without Ops skills.
Co-authored-by: Cursor <cursoragent@cursor.com>