API and DX

REST vs MCP, tool discovery, OAuth, read-only modes, and developer experience across vendors.