Registered after apiv2.RegisterAll so the tool index sees the AutoPatch operations. Routes under the prefix skip the token route check: the endpoint checks mcp:access itself and every loopback call is checked on its own route.