diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index afd2ede..1f18b29 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -7,6 +7,7 @@
     "email": "support@parallel.ai"
   },
   "homepage": "https://docs.parallel.ai/home",
+  "documentationUrl": "https://docs.parallel.ai/home",
   "privacyPolicyUrl": "https://parallel.ai/privacy-policy",
   "repository": "https://github.com/parallel-web/parallel-agent-skills",
   "license": "MIT",
diff --git a/CLAUDE.md b/CLAUDE.md
deleted file mode 100644
index 13a08f8..0000000
--- a/CLAUDE.md
+++ /dev/null
@@ -1,5 +0,0 @@
-# Parallel Plugin - Development Notes
-
-**Note:** This CLAUDE.md is NOT loaded when the plugin is installed in other projects. All guidance for Claude is in the skill and agent descriptions.
-
-See `skills/` and `agents/` for the actual plugin functionality.
diff --git a/README.md b/README.md
index 4b99a60..ec8dd41 100644
--- a/README.md
+++ b/README.md
@@ -154,6 +154,16 @@ credentials, or sensitive local content through search or fetch tools.
 The CLI-backed skills run `parallel-cli` locally using credentials you have
 already configured. They send task inputs to Parallel's API under the same terms.
 
+The bundled MCP connection has no authentication headers and does not forward
+CLI credentials. CLI-backed skills authenticate separately to Parallel through
+`parallel-cli`; the setup skill can check authentication status and start the
+CLI's sign-in flow.
+
+Migration examples describe authentication for the application being migrated.
+Provider credentials shown in scanner tests are synthetic source-code fixtures,
+not real keys or live requests. Neither those examples nor the test fixtures run
+automatically when the plugin loads.
+
 ## Support and security
 
 - **Questions and bugs:** [open an issue](https://github.com/parallel-web/parallel-agent-skills/issues) with your client, version, and error message (leave out API keys and other credentials), or see the [documentation](https://docs.parallel.ai/home).