The Permission Boundary My MCP Server Doesn't Actually Have

There's a theme showing up a lot in agent-tooling posts this week: agents holding tools they can...