Meta Council

65 of the 150 tools listed anonymously say in their own descriptions that they need an account or a key (get_visualization, plan_workflow, test_workflow_step, run_workflow, get_workflow_session, recommend_panel, advance_workflow, retry_workflow, get_settings, list_integrations, get_api_key_info, rotate_api_key, mint_child_api_key, list_outreach_campaigns, search_outreach_leads, outreach_analytics, score_locus_case, locus_determine_from_scores, ask_legal, campaign_pipeline_stats, list_campaign_triggers, list_campaign_replies, create_outreach_campaign, add_outreach_lead, assign_leads_to_campaign, update_outreach_lead_status, draft_outreach_email, create_outreach_pitch, get_sales_analytics, get_sales_recommendations, get_deal_health, create_accounting_run, preview_accounting_ticket_sync, sync_accounting_tickets, get_meta_council_platform_metrics, get_site_analytics, list_saved_views, get_saved_view, execute_saved_view, list_portfolio_snapshots, get_portfolio_snapshot, diff_portfolio_snapshots, list_portfolio_snapshot_notes, create_saved_view, update_saved_view, archive_saved_view, restore_saved_view, share_saved_view, unshare_saved_view, delete_saved_view, create_portfolio_snapshot, create_portfolio_snapshot_note, ticket_validation_finalize, list_meta_council_feedback, triage_meta_council_feedback, create_workflow_template, update_workflow_template, delete_workflow_template, create_monitor, list_monitors, delete_monitor, list_approvals, decide_approval, audit_export, account_export), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.