[
  {
    "method": "POST",
    "path": "/ai/compose",
    "controller": "AI",
    "handler": "compose",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/ai/rewrite",
    "controller": "AI",
    "handler": "rewrite",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/ai/subject-lines",
    "controller": "AI",
    "handler": "subjectLines",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/ai/preview-text",
    "controller": "AI",
    "handler": "previewText",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/ai/spam-check",
    "controller": "AI",
    "handler": "spamCheck",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/ai/segment-rules",
    "controller": "AI",
    "handler": "segmentRules",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/ai/campaign-debrief",
    "controller": "AI",
    "handler": "campaignDebrief",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/ai/send-time",
    "controller": "AI",
    "handler": "sendTime",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/v1/track",
    "controller": "Actions",
    "handler": "track",
    "authentication": "public-key",
    "mcp": false,
    "reason": "Browser tracking only; not a private project API"
  },
  {
    "method": "POST",
    "path": "/v1/send",
    "controller": "Actions",
    "handler": "send",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/v1/verify",
    "controller": "Actions",
    "handler": "verify",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/activity",
    "controller": "Activity",
    "handler": "getActivities",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/activity/stats",
    "controller": "Activity",
    "handler": "getStats",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/activity/recent-count",
    "controller": "Activity",
    "handler": "getRecentCount",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/activity/types",
    "controller": "Activity",
    "handler": "getTypes",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/activity/upcoming",
    "controller": "Activity",
    "handler": "getUpcoming",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/admin/me",
    "controller": "Admin",
    "handler": "getMe",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "GET",
    "path": "/admin/overview",
    "controller": "Admin",
    "handler": "getOverview",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "GET",
    "path": "/admin/users",
    "controller": "Admin",
    "handler": "getUsers",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "GET",
    "path": "/admin/projects",
    "controller": "Admin",
    "handler": "getProjects",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "GET",
    "path": "/admin/security",
    "controller": "Admin",
    "handler": "getSecurity",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "GET",
    "path": "/admin/activity",
    "controller": "Admin",
    "handler": "getActivity",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "GET",
    "path": "/admin/users/{id}",
    "controller": "Admin",
    "handler": "getUserDetail",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "GET",
    "path": "/admin/projects/{id}",
    "controller": "Admin",
    "handler": "getProjectDetail",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "PUT",
    "path": "/admin/projects/{id}/limits",
    "controller": "Admin",
    "handler": "updateProjectLimits",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "PUT",
    "path": "/admin/projects/{id}/plan",
    "controller": "Admin",
    "handler": "updateProjectPlan",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "GET",
    "path": "/admin/postal-health",
    "controller": "Admin",
    "handler": "getPostalHealth",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "POST",
    "path": "/admin/impersonate/{id}",
    "controller": "Admin",
    "handler": "impersonateUser",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "POST",
    "path": "/admin/projects/{id}/disable",
    "controller": "Admin",
    "handler": "disableProject",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "POST",
    "path": "/admin/projects/{id}/enable",
    "controller": "Admin",
    "handler": "enableProject",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "POST",
    "path": "/admin/users/{id}/verify-email",
    "controller": "Admin",
    "handler": "verifyUserEmail",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "POST",
    "path": "/admin/users/{id}/ban",
    "controller": "Admin",
    "handler": "banUser",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "POST",
    "path": "/admin/users/{id}/unban",
    "controller": "Admin",
    "handler": "unbanUser",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "DELETE",
    "path": "/admin/users/{id}",
    "controller": "Admin",
    "handler": "deleteUser",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "DELETE",
    "path": "/admin/projects/{id}",
    "controller": "Admin",
    "handler": "deleteProject",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "GET",
    "path": "/admin/impersonation-status",
    "controller": "Admin",
    "handler": "getImpersonationStatus",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "POST",
    "path": "/admin/stop-impersonating",
    "controller": "Admin",
    "handler": "stopImpersonating",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "GET",
    "path": "/analytics/timeseries",
    "controller": "Analytics",
    "handler": "getTimeSeries",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/analytics/top-campaigns",
    "controller": "Analytics",
    "handler": "getTopCampaigns",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/analytics/campaign-stats",
    "controller": "Analytics",
    "handler": "getCampaignStats",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/analytics/top-events",
    "controller": "Analytics",
    "handler": "getTopEvents",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/api-keys",
    "controller": "ApiKeys",
    "handler": "list",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/api-keys",
    "controller": "ApiKeys",
    "handler": "create",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "GET",
    "path": "/api-keys/usage",
    "controller": "ApiKeys",
    "handler": "usage",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "DELETE",
    "path": "/api-keys/{id}",
    "controller": "ApiKeys",
    "handler": "revoke",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/auth/login",
    "controller": "Auth",
    "handler": "login",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "POST",
    "path": "/auth/signup",
    "controller": "Auth",
    "handler": "signup",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "GET",
    "path": "/auth/logout",
    "controller": "Auth",
    "handler": "logout",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "GET",
    "path": "/auth/oauth-config",
    "controller": "Auth",
    "handler": "oauthConfig",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "POST",
    "path": "/auth/verify-email",
    "controller": "Auth",
    "handler": "verifyEmail",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "POST",
    "path": "/auth/request-verification",
    "controller": "Auth",
    "handler": "requestVerification",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "POST",
    "path": "/auth/request-password-reset",
    "controller": "Auth",
    "handler": "requestPasswordReset",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "POST",
    "path": "/auth/reset-password",
    "controller": "Auth",
    "handler": "resetPassword",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "POST",
    "path": "/auth/magic-link/request",
    "controller": "Auth",
    "handler": "requestMagicLink",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "POST",
    "path": "/auth/magic-link/verify",
    "controller": "Auth",
    "handler": "verifyMagicLink",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "POST",
    "path": "/campaigns",
    "controller": "Campaigns",
    "handler": "create",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/campaigns",
    "controller": "Campaigns",
    "handler": "list",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/campaigns/bulk-update",
    "controller": "Campaigns",
    "handler": "bulkUpdate",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/campaigns/{id}",
    "controller": "Campaigns",
    "handler": "get",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "PUT",
    "path": "/campaigns/{id}",
    "controller": "Campaigns",
    "handler": "update",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/campaigns/{id}",
    "controller": "Campaigns",
    "handler": "delete",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/campaigns/{id}/duplicate",
    "controller": "Campaigns",
    "handler": "duplicate",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/campaigns/{id}/send",
    "controller": "Campaigns",
    "handler": "send",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/campaigns/{id}/cancel",
    "controller": "Campaigns",
    "handler": "cancel",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/campaigns/{id}/stats",
    "controller": "Campaigns",
    "handler": "stats",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/campaigns/{id}/pick-winner",
    "controller": "Campaigns",
    "handler": "pickWinner",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/campaigns/{id}/analytics",
    "controller": "Campaigns",
    "handler": "analytics",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/campaigns/{id}/test",
    "controller": "Campaigns",
    "handler": "sendTest",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/config",
    "controller": "Config",
    "handler": "getConfig",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "GET",
    "path": "/contacts",
    "controller": "Contacts",
    "handler": "list",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/contacts/export",
    "controller": "Contacts",
    "handler": "exportContacts",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/contacts/fields",
    "controller": "Contacts",
    "handler": "getAvailableFields",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/contacts/suppressions",
    "controller": "Contacts",
    "handler": "listSuppressions",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/contacts/suppressions",
    "controller": "Contacts",
    "handler": "addSuppression",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/contacts/suppressions/{contactId}",
    "controller": "Contacts",
    "handler": "removeSuppression",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/contacts/suppressions/stats",
    "controller": "Contacts",
    "handler": "suppressionStats",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/contacts/suppressions/export",
    "controller": "Contacts",
    "handler": "exportSuppressions",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/contacts/fields/{field}/values",
    "controller": "Contacts",
    "handler": "getFieldValues",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/contacts/{id}",
    "controller": "Contacts",
    "handler": "get",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/contacts",
    "controller": "Contacts",
    "handler": "create",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "PATCH",
    "path": "/contacts/{id}",
    "controller": "Contacts",
    "handler": "update",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/contacts/{id}/tags",
    "controller": "Contacts",
    "handler": "addTags",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/contacts/{id}/tags/{tagId}",
    "controller": "Contacts",
    "handler": "removeTag",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/contacts/{id}/emails",
    "controller": "Contacts",
    "handler": "getEmails",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/contacts/{id}",
    "controller": "Contacts",
    "handler": "delete",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/contacts/public/{id}",
    "controller": "Contacts",
    "handler": "getPublic",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "POST",
    "path": "/contacts/public/{id}/subscribe",
    "controller": "Contacts",
    "handler": "subscribePublic",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "POST",
    "path": "/contacts/public/{id}/unsubscribe",
    "controller": "Contacts",
    "handler": "unsubscribePublic",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "POST",
    "path": "/contacts/lookup",
    "controller": "Contacts",
    "handler": "lookup",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/contacts/import",
    "controller": "Contacts",
    "handler": "importCsv",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/contacts/import/{jobId}",
    "controller": "Contacts",
    "handler": "getImportStatus",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/contacts/fields/{field}/usage",
    "controller": "Contacts",
    "handler": "getFieldUsage",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/contacts/fields/{field}",
    "controller": "Contacts",
    "handler": "deleteField",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/contacts/bulk-subscribe",
    "controller": "Contacts",
    "handler": "bulkSubscribe",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/contacts/bulk-unsubscribe",
    "controller": "Contacts",
    "handler": "bulkUnsubscribe",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/contacts/bulk-delete",
    "controller": "Contacts",
    "handler": "bulkDelete",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/contacts/bulk/{jobId}",
    "controller": "Contacts",
    "handler": "getBulkActionStatus",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/dedicated-ips",
    "controller": "DedicatedIps",
    "handler": "list",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/dedicated-ips",
    "controller": "DedicatedIps",
    "handler": "create",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "PATCH",
    "path": "/dedicated-ips/{id}",
    "controller": "DedicatedIps",
    "handler": "update",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/dedicated-ips/{id}",
    "controller": "DedicatedIps",
    "handler": "remove",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/developer/smtp/test",
    "controller": "Developer",
    "handler": "testSmtpSend",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "GET",
    "path": "/v2/domainTemplates/providers/sendbound.com/services/email-sending",
    "controller": "DomainConnect",
    "handler": "getEmailTemplate",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "GET",
    "path": "/domains",
    "controller": "Domains",
    "handler": "listDomains",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/domains/project/{projectId}",
    "controller": "Domains",
    "handler": "getProjectDomains",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/domains",
    "controller": "Domains",
    "handler": "addDomain",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/domains/{id}",
    "controller": "Domains",
    "handler": "getDomain",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/domains/{id}/verify",
    "controller": "Domains",
    "handler": "checkVerification",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/domains/{id}/dns-check",
    "controller": "Domains",
    "handler": "checkDns",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "PATCH",
    "path": "/domains/{id}/toggle",
    "controller": "Domains",
    "handler": "toggleFeature",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/domains/{id}",
    "controller": "Domains",
    "handler": "removeDomain",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/emails/batch",
    "controller": "Emails",
    "handler": "batchSend",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/emails",
    "controller": "Emails",
    "handler": "list",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/emails/inbound",
    "controller": "Emails",
    "handler": "listInbound",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/emails/{id}/attachments/{attachmentId}",
    "controller": "Emails",
    "handler": "downloadInboundAttachment",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/emails/{id}",
    "controller": "Emails",
    "handler": "getOne",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/events/track",
    "controller": "Events",
    "handler": "track",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/events",
    "controller": "Events",
    "handler": "list",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/events/stats",
    "controller": "Events",
    "handler": "stats",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/events/contact/{contactId}",
    "controller": "Events",
    "handler": "getContactEvents",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/events/names",
    "controller": "Events",
    "handler": "getEventNames",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/events/{eventName}/usage",
    "controller": "Events",
    "handler": "getEventUsage",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/events/{eventName}",
    "controller": "Events",
    "handler": "deleteEvent",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/integrations/mailchimp/import",
    "controller": "Integrations",
    "handler": "importMailchimp",
    "authentication": "secret-key",
    "mcp": false,
    "reason": "Third-party credentials: use the authenticated dashboard/API, not AI tool arguments"
  },
  {
    "method": "POST",
    "path": "/integrations/klaviyo/import",
    "controller": "Integrations",
    "handler": "importKlaviyo",
    "authentication": "secret-key",
    "mcp": false,
    "reason": "Third-party credentials: use the authenticated dashboard/API, not AI tool arguments"
  },
  {
    "method": "POST",
    "path": "/integrations/convertkit/import",
    "controller": "Integrations",
    "handler": "importConvertKit",
    "authentication": "secret-key",
    "mcp": false,
    "reason": "Third-party credentials: use the authenticated dashboard/API, not AI tool arguments"
  },
  {
    "method": "POST",
    "path": "/integrations/brevo/import",
    "controller": "Integrations",
    "handler": "importBrevo",
    "authentication": "secret-key",
    "mcp": false,
    "reason": "Third-party credentials: use the authenticated dashboard/API, not AI tool arguments"
  },
  {
    "method": "POST",
    "path": "/integrations/hubspot/import",
    "controller": "Integrations",
    "handler": "importHubSpot",
    "authentication": "secret-key",
    "mcp": false,
    "reason": "Third-party credentials: use the authenticated dashboard/API, not AI tool arguments"
  },
  {
    "method": "GET",
    "path": "/logs",
    "controller": "Logs",
    "handler": "list",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/projects/@me/preference-page",
    "controller": "Preferences",
    "handler": "getPreferencePage",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "PATCH",
    "path": "/projects/@me/preference-page",
    "controller": "Preferences",
    "handler": "updatePreferencePage",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/preferences/{contactId}",
    "controller": "Preferences",
    "handler": "get",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "POST",
    "path": "/preferences/{contactId}",
    "controller": "Preferences",
    "handler": "update",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "POST",
    "path": "/preferences/{contactId}/unsubscribe-all",
    "controller": "Preferences",
    "handler": "unsubscribeAll",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "GET",
    "path": "/unsubscribe-groups",
    "controller": "Preferences",
    "handler": "listGroups",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/unsubscribe-groups",
    "controller": "Preferences",
    "handler": "createGroup",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "PATCH",
    "path": "/unsubscribe-groups/{id}",
    "controller": "Preferences",
    "handler": "updateGroup",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/unsubscribe-groups/{id}",
    "controller": "Preferences",
    "handler": "deleteGroup",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/projects/{projectId}/webhooks",
    "controller": "ProjectWebhooks",
    "handler": "list",
    "authentication": "secret-key",
    "mcp": false,
    "reason": "Dashboard alias; MCP uses canonical /webhooks"
  },
  {
    "method": "POST",
    "path": "/projects/{projectId}/webhooks",
    "controller": "ProjectWebhooks",
    "handler": "create",
    "authentication": "secret-key",
    "mcp": false,
    "reason": "Dashboard alias; MCP uses canonical /webhooks"
  },
  {
    "method": "GET",
    "path": "/projects/{projectId}/webhooks/{id}",
    "controller": "ProjectWebhooks",
    "handler": "get",
    "authentication": "secret-key",
    "mcp": false,
    "reason": "Dashboard alias; MCP uses canonical /webhooks"
  },
  {
    "method": "GET",
    "path": "/projects/{projectId}/webhooks/{id}/deliveries",
    "controller": "ProjectWebhooks",
    "handler": "deliveries",
    "authentication": "secret-key",
    "mcp": false,
    "reason": "Dashboard alias; MCP uses canonical /webhooks"
  },
  {
    "method": "PATCH",
    "path": "/projects/{projectId}/webhooks/{id}",
    "controller": "ProjectWebhooks",
    "handler": "update",
    "authentication": "secret-key",
    "mcp": false,
    "reason": "Dashboard alias; MCP uses canonical /webhooks"
  },
  {
    "method": "POST",
    "path": "/projects/{projectId}/webhooks/{id}/test",
    "controller": "ProjectWebhooks",
    "handler": "test",
    "authentication": "secret-key",
    "mcp": false,
    "reason": "Dashboard alias; MCP uses canonical /webhooks"
  },
  {
    "method": "DELETE",
    "path": "/projects/{projectId}/webhooks/{id}",
    "controller": "ProjectWebhooks",
    "handler": "delete",
    "authentication": "secret-key",
    "mcp": false,
    "reason": "Dashboard alias; MCP uses canonical /webhooks"
  },
  {
    "method": "GET",
    "path": "/projects/@me/smtp/credentials",
    "controller": "Projects",
    "handler": "getSmtpCredentials",
    "authentication": "secret-key",
    "mcp": false,
    "reason": "Project configuration/credential boundary; use the authenticated API/dashboard"
  },
  {
    "method": "PUT",
    "path": "/projects/@me/smtp",
    "controller": "Projects",
    "handler": "updateSmtpSettings",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/projects/@me/smtp/test",
    "controller": "Projects",
    "handler": "testSmtpSettings",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/projects/@me/deliverability",
    "controller": "Projects",
    "handler": "getDeliverability",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/projects/{id}/setup-state",
    "controller": "Projects",
    "handler": "getSetupState",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "GET",
    "path": "/projects/{id}/security",
    "controller": "Projects",
    "handler": "getSecurityMetrics",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "GET",
    "path": "/projects/{id}/members",
    "controller": "Projects",
    "handler": "getMembers",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/projects/{id}/members",
    "controller": "Projects",
    "handler": "addMember",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "PATCH",
    "path": "/projects/{id}/members/{userId}",
    "controller": "Projects",
    "handler": "updateMemberRole",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "DELETE",
    "path": "/projects/{id}/members/{userId}",
    "controller": "Projects",
    "handler": "removeMember",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "GET",
    "path": "/segments",
    "controller": "Segments",
    "handler": "list",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/segments/{id}",
    "controller": "Segments",
    "handler": "get",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/segments/{id}/contacts",
    "controller": "Segments",
    "handler": "getContacts",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/segments",
    "controller": "Segments",
    "handler": "create",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "PATCH",
    "path": "/segments/{id}",
    "controller": "Segments",
    "handler": "update",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/segments/{id}",
    "controller": "Segments",
    "handler": "delete",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/segments/{id}/members",
    "controller": "Segments",
    "handler": "addMembers",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/segments/{id}/members",
    "controller": "Segments",
    "handler": "removeMembers",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/segments/{id}/compute",
    "controller": "Segments",
    "handler": "compute",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/segments/{id}/refresh",
    "controller": "Segments",
    "handler": "refresh",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/sso/config",
    "controller": "Sso",
    "handler": "getConfig",
    "authentication": "secret-key",
    "mcp": false,
    "reason": "Project configuration/credential boundary; use the authenticated API/dashboard"
  },
  {
    "method": "POST",
    "path": "/sso/configure",
    "controller": "Sso",
    "handler": "configure",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/sso/verify-domain",
    "controller": "Sso",
    "handler": "verifyDomain",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/sso/set-require",
    "controller": "Sso",
    "handler": "setRequire",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/sso/disable",
    "controller": "Sso",
    "handler": "disable",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "GET",
    "path": "/sso/saml/metadata",
    "controller": "Sso",
    "handler": "samlMetadata",
    "authentication": "secret-key",
    "mcp": false,
    "reason": "Project configuration/credential boundary; use the authenticated API/dashboard"
  },
  {
    "method": "GET",
    "path": "/sso/check",
    "controller": "Sso",
    "handler": "check",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "GET",
    "path": "/sso/initiate",
    "controller": "Sso",
    "handler": "initiate",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "POST",
    "path": "/sso/saml/callback",
    "controller": "Sso",
    "handler": "samlCallback",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "GET",
    "path": "/sso/callback",
    "controller": "Sso",
    "handler": "callback",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "GET",
    "path": "/admin/system-settings/provider",
    "controller": "SystemSettings",
    "handler": "getProvider",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "PUT",
    "path": "/admin/system-settings/postal",
    "controller": "SystemSettings",
    "handler": "savePostal",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "POST",
    "path": "/admin/system-settings/postal/test",
    "controller": "SystemSettings",
    "handler": "testPostal",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "PUT",
    "path": "/admin/system-settings/provider/select",
    "controller": "SystemSettings",
    "handler": "selectProvider",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "GET",
    "path": "/tags",
    "controller": "Tags",
    "handler": "list",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/tags",
    "controller": "Tags",
    "handler": "create",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "PATCH",
    "path": "/tags/{id}",
    "controller": "Tags",
    "handler": "update",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/tags/{id}",
    "controller": "Tags",
    "handler": "delete",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/templates",
    "controller": "Templates",
    "handler": "list",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/templates/{id}",
    "controller": "Templates",
    "handler": "get",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/templates",
    "controller": "Templates",
    "handler": "create",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "PATCH",
    "path": "/templates/{id}",
    "controller": "Templates",
    "handler": "update",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/templates/{id}",
    "controller": "Templates",
    "handler": "delete",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/templates/bulk-update",
    "controller": "Templates",
    "handler": "bulkUpdate",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/templates/{id}/duplicate",
    "controller": "Templates",
    "handler": "duplicate",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/templates/{id}/usage",
    "controller": "Templates",
    "handler": "getUsage",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/templates/convert",
    "controller": "Templates",
    "handler": "convert",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "POST",
    "path": "/unsubscribe/{id}",
    "controller": "Unsubscribe",
    "handler": "oneClick",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "GET",
    "path": "/unsubscribe/{id}",
    "controller": "Unsubscribe",
    "handler": "redirect",
    "authentication": "public",
    "mcp": false,
    "reason": "Public/token-authenticated application flow"
  },
  {
    "method": "POST",
    "path": "/uploads/image",
    "controller": "Uploads",
    "handler": "uploadImage",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/webhooks",
    "controller": "UserWebhooks",
    "handler": "list",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/webhooks",
    "controller": "UserWebhooks",
    "handler": "create",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/webhooks/{id}",
    "controller": "UserWebhooks",
    "handler": "get",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/webhooks/{id}/deliveries",
    "controller": "UserWebhooks",
    "handler": "deliveries",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "PATCH",
    "path": "/webhooks/{id}",
    "controller": "UserWebhooks",
    "handler": "update",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/webhooks/{id}/test",
    "controller": "UserWebhooks",
    "handler": "test",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/webhooks/{id}",
    "controller": "UserWebhooks",
    "handler": "delete",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/users/@me",
    "controller": "Users",
    "handler": "me",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "GET",
    "path": "/users/@me/projects",
    "controller": "Users",
    "handler": "meProjects",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/users/@me/projects",
    "controller": "Users",
    "handler": "createProject",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "PATCH",
    "path": "/users/@me/projects/{id}",
    "controller": "Users",
    "handler": "updateProject",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "GET",
    "path": "/users/@me/projects/{id}/secret",
    "controller": "Users",
    "handler": "getProjectSecret",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/users/@me/projects/{id}/regenerate-keys",
    "controller": "Users",
    "handler": "regenerateProjectKeys",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/users/@me/projects/{id}/checkout",
    "controller": "Users",
    "handler": "createCheckoutSession",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/users/@me/projects/{id}/checkout-embedded",
    "controller": "Users",
    "handler": "createEmbeddedCheckoutSession",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/users/@me/projects/{id}/subscribe",
    "controller": "Users",
    "handler": "createInlineSubscription",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/users/@me/projects/{id}/subscribe/activate",
    "controller": "Users",
    "handler": "activateSubscription",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/users/@me/projects/{id}/change-plan",
    "controller": "Users",
    "handler": "changePlan",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "DELETE",
    "path": "/users/@me/projects/{id}/addon/{addonId}",
    "controller": "Users",
    "handler": "removeAddon",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/users/@me/projects/{id}/billing-portal",
    "controller": "Users",
    "handler": "createBillingPortalSession",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "GET",
    "path": "/users/@me/projects/{id}/billing-limits",
    "controller": "Users",
    "handler": "getBillingLimits",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "GET",
    "path": "/users/@me/projects/{id}/billing-daily",
    "controller": "Users",
    "handler": "getBillingDaily",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "PUT",
    "path": "/users/@me/projects/{id}/billing-limits",
    "controller": "Users",
    "handler": "updateBillingLimits",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "GET",
    "path": "/users/@me/projects/{id}/billing-consumption",
    "controller": "Users",
    "handler": "getBillingConsumption",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "GET",
    "path": "/users/@me/projects/{id}/billing-invoices",
    "controller": "Users",
    "handler": "getBillingInvoices",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "GET",
    "path": "/users/@me/projects/{id}/subscription-status",
    "controller": "Users",
    "handler": "getSubscriptionStatus",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "GET",
    "path": "/users/@me/projects/{id}/payment-method",
    "controller": "Users",
    "handler": "getPaymentMethod",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/users/@me/projects/{id}/cancel-subscription",
    "controller": "Users",
    "handler": "cancelSubscription",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/users/@me/projects/{id}/reactivate-subscription",
    "controller": "Users",
    "handler": "reactivateSubscription",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/users/@me/projects/{id}/setup-intent",
    "controller": "Users",
    "handler": "createSetupIntent",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "PUT",
    "path": "/users/@me/projects/{id}/payment-method",
    "controller": "Users",
    "handler": "updatePaymentMethod",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "GET",
    "path": "/users/@me/projects/{id}/security",
    "controller": "Users",
    "handler": "getSecurityHealth",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "POST",
    "path": "/users/@me/projects/{id}/reset",
    "controller": "Users",
    "handler": "resetProject",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "DELETE",
    "path": "/users/@me/projects/{id}",
    "controller": "Users",
    "handler": "deleteProject",
    "authentication": "session",
    "mcp": false,
    "reason": "Account/security operation requires a dashboard user session"
  },
  {
    "method": "GET",
    "path": "/warmup",
    "controller": "Warmup",
    "handler": "list",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/warmup",
    "controller": "Warmup",
    "handler": "create",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/warmup/{id}",
    "controller": "Warmup",
    "handler": "get",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "PATCH",
    "path": "/warmup/{id}",
    "controller": "Warmup",
    "handler": "update",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/warmup/{id}",
    "controller": "Warmup",
    "handler": "remove",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/warmup/{id}/advance",
    "controller": "Warmup",
    "handler": "advance",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/webhooks/sns",
    "controller": "Webhooks",
    "handler": "receiveSNSWebhook",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "POST",
    "path": "/webhooks/incoming/stripe",
    "controller": "Webhooks",
    "handler": "receiveStripeWebhook",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "POST",
    "path": "/webhooks/inbound",
    "controller": "Webhooks",
    "handler": "receiveInbound",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "POST",
    "path": "/webhooks/postal",
    "controller": "Webhooks",
    "handler": "receivePostalInbound",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "POST",
    "path": "/webhooks/postal-events",
    "controller": "Webhooks",
    "handler": "receivePostalOutboundEvents",
    "authentication": "internal",
    "mcp": false,
    "reason": "Administrator/provider callback; not a customer API tool"
  },
  {
    "method": "GET",
    "path": "/workflows",
    "controller": "Workflows",
    "handler": "list",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/workflows/fields",
    "controller": "Workflows",
    "handler": "getAvailableFields",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/workflows/bulk-update",
    "controller": "Workflows",
    "handler": "bulkUpdate",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/workflows/{id}/ai-generate",
    "controller": "Workflows",
    "handler": "generateWithAi",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/workflows/{id}",
    "controller": "Workflows",
    "handler": "get",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/workflows",
    "controller": "Workflows",
    "handler": "create",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "PATCH",
    "path": "/workflows/{id}",
    "controller": "Workflows",
    "handler": "update",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/workflows/{id}",
    "controller": "Workflows",
    "handler": "delete",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/workflows/{id}/duplicate",
    "controller": "Workflows",
    "handler": "duplicate",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/workflows/{id}/steps",
    "controller": "Workflows",
    "handler": "addStep",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "PATCH",
    "path": "/workflows/{id}/steps/{stepId}",
    "controller": "Workflows",
    "handler": "updateStep",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/workflows/{id}/steps/{stepId}",
    "controller": "Workflows",
    "handler": "deleteStep",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/workflows/{id}/transitions",
    "controller": "Workflows",
    "handler": "createTransition",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/workflows/{id}/transitions/{transitionId}/insert-step",
    "controller": "Workflows",
    "handler": "insertStepOnTransition",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/workflows/{id}/transitions/{transitionId}",
    "controller": "Workflows",
    "handler": "deleteTransition",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/workflows/{id}/executions",
    "controller": "Workflows",
    "handler": "startExecution",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/workflows/{id}/executions",
    "controller": "Workflows",
    "handler": "listExecutions",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "GET",
    "path": "/workflows/{id}/executions/{executionId}",
    "controller": "Workflows",
    "handler": "getExecution",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "DELETE",
    "path": "/workflows/{id}/executions/{executionId}",
    "controller": "Workflows",
    "handler": "cancelExecution",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  },
  {
    "method": "POST",
    "path": "/workflows/{id}/executions/cancel-all",
    "controller": "Workflows",
    "handler": "cancelAllExecutions",
    "authentication": "secret-key",
    "mcp": true,
    "reason": "Project-scoped customer operation"
  }
]