Ask the agent to sign a challenge
The server discovers the gateway-prefixed MCP tool, sends the exact challenge to the KMS-backed signer, verifies the result, and returns the real base64 signature.
Try: sign this challenge: abc-123
Accepted forms include “sign this challenge: …”, “please sign: …”, and “sign the message …”.