MCP Server Security: The Credential Problem Behind Every Tool Call
An MCP server calls cloud and SaaS APIs with its own credentials. The real risks of local and remote servers, why the spec bans token passthrough, and how to make MCP activity attributable in cloud logs.