The agent-layer MCP tools: spaces, capability grants, sessions, and handoffs, calling barrel_spaces / barrel_caps / barrel_session / barrel_handoff directly. Authorization mirrors the REST surface: space creation is management-only (global principals), grant administration needs admin on the space, session reads/writes follow the right ladder, and handoff accept/complete need nothing but the handoff token: possession is the right.