Log permission denied errors as such, instead of the full stack trace.

Include which item IDs caused 500s.
Add an item_lookup tool for showing what was extracted for a given item.