Securing an MCP Server in ASP.NET Core: OAuth, Scopes and Tool Authorization

The thing that makes MCP servers so quick to build is also what makes them dangerous. You decorate a method, the SDK generates a tool definition, and a language model somewhere can now invoke it. That