[simolus3]

• Make the "clear data" button reconnect, like the JS SDK does.
• When listing databases, don't include the token by default (making that call safer for other tools like agents to invoke via MCP). We don't need further hardening, agents with access to the running app have other ways of extracting a token if they wanted to. But it shouldn't end up in logs unless the agent specfically asks for it.

AI use: Created with Claude Code, manually tested.