The Model Context Protocol exploded onto the scene because it’s easy . Stand up a server, expose a few tools, point Claude or VS Code at it, and your agent can suddenly read files, hit APIs, and run code. That same ease is the problem: most MCP servers ship with no authentication at all , and they’re getting pushed straight to the internet.