MCP Security: Where to Put the Authorization Boundary

Where should MCP tool calls be authorized? Why a gateway at the client-server seam beats prompts, servers and proxies, with a working setup.