2ools

2 of the 76 tools listed anonymously say in their own descriptions that they need an account or a key (act_on_project_os_task, run_project_agent), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.

The server exposes a public surface before authorization: create_public_preview, list_build_systems, list_connected_engines, get_project_engine_workspace, attach_project_engine_workspace, register_existing_project, build_from_conversation, start_project_on_engine, refine_project, get_build, get_engine_dispatch, compare_versions, list_approval_requests, approve_version, reject_version, cancel_build, get_account_profile, update_account_profile, get_project_access, invite_project_member, update_project_member_role, remove_project_member, revoke_project_invite, list_projects, get_project, get_project_context, continue_project, refresh_project_cockpit, activate_project, get_project_mission, get_project_discipline, list_project_engineering_decisions, answer_project_engineering_decision, manage_project_discipline, update_project_mission, review_project_mission, manage_work_watchdog, act_on_project_os_task, update_living_plan, render_project_preview, list_project_agents, get_agent, run_project_agent, dispatch_project_work, get_project_work_dispatch, cancel_agent_run, get_project_activity, wait_for_project_activity, list_project_feedback, add_project_feedback, resolve_project_feedback, list_project_pins, add_project_pin, remove_project_pin, prepare_version_export, get_version_share_link, create_version_share_link, revoke_version_share_link, list_artifacts, get_artifact, prepare_artifact_upload, prepare_artifact_download, list_artifact_approval_requests, approve_artifact_version, reject_artifact_version, get_task_quality_gate, run_task_quality_gate, get_work_handoff, prepare_work_handoff, list_work_assignments, create_work_assignment, claim_work_assignment, heartbeat_work_session, checkpoint_work_session, submit_work_session, decide_work_assignment.