Your MCP Hub Exposes Every Tool to Every Agent. That's the Bug.

When an MCP hub exposes the full tool catalog to every connected agent, agents call tools they were never scoped for. Per-agent tool lists, mutating-tool opt-in, and spec-driven exposure are the cheaper fixes than prompt instructions.