Private MCP endpoint. POST /mcp with a bearer token.