transport.url must be a public HTTPS address. auth.kind is bearer, header (with a header name) or none, and tools is a list of tool names, or null for every tool the server offers.
auth.secret is a name from your secrets, never a raw token. integrations.list is the blast radius: every connected server, its tools, and the name it authenticates with, everything an agent could reach outside the browser if a run named it. integrations.delete disconnects a server; the underlying credential is untouched, it lives in secrets and is deleted there separately.