Remote Commander
MCP: /mcp (OAuth 2.1 + PKCE)
Device API: authenticated /agent/v1/