MCP Grew Up by Giving Things Away
Across five revisions the Model Context Protocol has steadily reduced the set of responsibilities it claims for itself, transferring authentication to the identity provider, client identity to the domain name system, consent to the administrator, and session state and routing to the application and the gateway. What the reduction leaves behind is a single trust boundary for which no better owner exists, and the attacks that have succeeded in practice are concentrated there.