scndbrn vault MCP — endpoint: /mcp (Streamable HTTP, Bearer auth)