fli MCP — secret path required; /health is public