xint-localhost-bind-prevents-desktop-bridge-even-with-traefik
xint binds to 127.0.0.1:18207 (localhost only) with Bearer token auth. Even after exposing it via Traefik HTTPS, Claude Desktop cannot bridge it because the OAuth DCR requirement blocks Bearer token delivery. The combination of local-bind + Bearer auth makes xint structurally permanent on VPS — no Desktop migration path without either removing auth or implementing full OAuth 2.0.