https://mcp.agentcard.sh/mcp with the user’s connection token (or a buy_token for org-owned accounts).
Behavior: destructive.
Not in the default
tools/list. It is still callable by exact name, and appears when the client sends the x-expert-tools: 1 header.