Expand description
Optional remote MCP transport over Streamable HTTP.
The endpoint exposes shell and filesystem capabilities, so remote mode is deliberately fail-closed: loopback bind by default, strong file-backed or explicit bearer credentials, bounded request concurrency/rate, and isolated daemon namespaces for independently authenticated principals.