API and MCP

Use session-auth routes for in-app exports and admin actions. Use org-scoped API keys for integration automation. Use MCP tooling for structured agent workflows.