FastMCP: tool discovery is not authorization

FastMCP makes it easy to expose Python functions as MCP tools, resources, and prompts. The production risk is not discovery itself; it is what a discovered capability is allowed to trigger. I validate