MCP stdio vs streamable-http: what changes when you go remote

The transport your MCP server runs on decides who is allowed to call your tools. Not your code, not your tool docstrings. The transport. On stdio, the answer is "whoever can spawn this process on this