cto hosted surface. MCP at /mcp. Nothing readable without authorization.