Connect /mcp using OAuth. File access and commands are confined to an isolated workspace. No VPS root credentials are accepted by this service.