Letting users trust their own MCP clients, without opening a phishing hole

The problem You run your own agent: a Slack bot, a service on a VPS, an MCP client you...