From MCP Configuration to Server-Side Execution: A Trust-Boundary Case Study
An API that omits secrets, artifacts without runtime configuration, and an unreachable database led to a closer look at MCP stdio process-launch privileges. A case study in eliminating paths and separating configuration authority from runtime authority.