Jailed tool workspace

This subdomain is the public site for the jailed tool connector (not the root shell).

Web root: /opt/tool/www. Agent work directory: /opt/tool/work. Writes cannot leave /opt/tool.

MCP lives at /mcp (OAuth). Health at /health.