Three teams plugged MCP servers into our agent. Security asked who checks the permissions.

Our internal agent started small, with one MCP server my team wrote. Within a quarter, two more teams had connected their own servers to it. One exposed billing lookups and one could open tickets in a