Server-Sent Events (SSE) endpoint used by MCP servers for communication, potentially exposed to unauthenticated users.