REST API endpoint for direct tool calls in Apache Pinot MCP, which may be targeted for unauthorized SQL execution.