Typed, least-privilege REST, WebSocket, and relay bridge for Paper servers, with scoped credentials, JWT/JWKS, rate limits, and a provider API.