script sandbox MCP: POST /mcp (Bearer required); GET /files/<conversation>/<file>