No inbound ports, ever
Both plans run on the same edge — outbound HTTPS only, OAuth 2.1 with PKCE.
Full activity transparency
Every tool call shows model, tokens, cost, and full message text — on Free too.
Yours to revoke
Any connector, token, or agent in one click. Doesn't matter what tier you're on.