FINAL: Curogram MCP deployed on claude-cloud. INFRA HEALTHY end-to-end. - env ~/.config/curogram-mcp.env mode 0600 (creds + shared MCP bearer) - supervisor running (pids 686107 supervisor / 686219 bun), flock-guarded, restart loop, in tmux session curogram-svc - port 127.0.0.1:18817 listening - funnel route /curogram -> 127.0.0.1:18817 added via sudo tailscale serve, all existing routes intact - public URL https://claude-cloud.tail053faf.ts.net/curogram/mcp : 401 without bearer, 400/authenticated with bearer (gate verified) - MCP transport verified: client connect OK, all 8 tools listed SMOKE TEST RESULT: read tool dispatches but Curogram LOGIN FAILS (HTTP 400, GRAPHQL_VALIDATION_FAILED). The login mutation/types (login, LoginPage, MfaListSchema, ProviderTokenSchema) baked into curogram-auth.ts do NOT exist on the current api-v2.curogram.com schema. This is a CODE bug (stale login query), NOT MFA and NOT a creds problem. CDP fallback NOT used (wrong remedy for a schema mismatch). NEXT: curogram-auth.ts login mutation needs updating to match current Curogram GraphQL schema before any auth'd tool works.