The “reads the real APIs instead of guessing” line is the whole point — an agent without live access to the system it is working in will happily invent a prop that never existed. The auth-header-overrides-OAuth gotcha is a good catch too; that kind of silent credential conflict is exactly what makes agent setups fail in confusing ways.