MCP server authentication and tool-level authorization are different layers. Most implementations conflate them — here's why that creates lateral movement risk in multi-agent systems, and how to design tool-level permission scoping from the start.
Tool-Level Permission Scoping in MCP: Why Server Authentication Isn't Enough
