The agent tool layer inherited a local trust model on the public internet
A July 2026 study found hundreds of internet-facing MCP servers and a high rate of missing OAuth among the systems it tested. MCP began with local stdio trust. When teams exposed that model over HTTP, credentials, policy, and audit did not appear by default.

Lead essay
The current Doric argument leads the index ahead of the chronological archive.
Read the note