Cross-MCP exfil demo server. Endpoint: /mcp