Record every HTTP tools/call to sink (e.g. the Room-backed sink from droid-mcp-audit). Has no effect unless the HTTP server is enabled. In-process calls are not audited — the host owns that path.
tools/call
droid-mcp-audit