We scanned 2,500 public MCP servers. 72 touch money. None mentions a kill switch.

A scan of public MCP servers shows capability documented and restraint missing. Three checks we implemented: enforced budget, signed receipt, fail-closed stop.