
MCP Security for Enterprise Commerce Agents (2026)
MCP is a tool pipe. The 2025-11-25 spec requires OAuth 2.1 and Protected Resource Metadata on HTTP. A local stdio server must not pretend that flow applies. Tool descriptions are not a permission boundary.


