The admin UI itself — the controllers serving UiNode JSON under /admin/api/**, the pages and components they render, and the SPA assets. A library, like mc-agent-api-rest: no Spring Boot main class, so a host app decides how it is wired and secured.