Not Found is the wrong answer to a permission problem

I spent today putting an MCP surface on a multi-tenant Laravel control plane — the kind of app where...