Authentication was clean and immediately verifiable

Both models set up API access with a single integration token passed as a Bearer header. The users.me() endpoint confirmed identity and workspace in one call. After the operator shared the test page, both models verified read and write access within two additional API calls. No OAuth flow, no multi-step token exchange, no scoping configuration was required.