It also works in demo mode without live upstream credentials. That was intentional. I wanted people to test the flow first: list tools, call read tools, try a denied write action, see the boundary…