One-install Weaviate front door over 6 bounded official domain packs and 6 non-chat, uncached, read-only workflows. It admits 108 of 114 operations from Weaviate 1.38.4's official Swagger document at commit 6af189f84eed9fcc9ea24614ed0b52bcd6d01abb. Only three redundant HEAD aliases and three protocol-owned MCP session/stream endpoints are excluded; every static JSON REST feature family remains covered. The surface spans objects, references, batches, GraphQL, tokenization, classifications, schemas, properties, indexes, shards, tenants, aliases, users, keys, RBAC, namespaces, backups, restore, export, replication, cluster statistics, nodes, tasks, health, metadata, and discovery. Enroll a secured deployment with the complete Authorization Bearer value. Raw JSON and decimal-string query selectors preserve exact request integers; unsafe response integers remain strings; reads are uncached; authenticated reads are marked sensitive-read and every mutation requires approval. No arbitrary vector-database object is misrepresented as a task, note, or project Source.