Short answer

MCP lets a client discover and invoke server capabilities. Compatibility does not establish trust or authorization.

Boundary

Authenticate callers, validate allowlisted inputs, authorize each action, and minimize replies.