Seven ways a remote MCP server gets authorization wrong

Remote MCP servers are shipping fast, and a lot of them are generated straight out of an OpenAPI spec...