is the MCP endpoint just exposing the full panel API, or is there a scoped permission set specifically for AI callers?