AgentOS private MCP endpoint. Use the full invited connection URL.