MCP Bastion endpoint