Four MCP Security Questions Where the Obvious Answer Fails the Interview

"The token is signed by our own login server, so it is trustworthy everywhere inside the company." That is the weak answer I wrote down for one of the scenarios on our MCP interview questions page. It