Before an MCP server touches production data, the review that matters covers four questions: which tokens the server accepts, whether tool definitions can change after approval, how consent is enforced when the server proxies a third-party API, and what every invocation writes to the audit log. The Model Context Protocol’s …