MCP authorization standards: OAuth scopes, AuthZEN, and what's still missing

MCP leans on OAuth 2.1 for authentication, but OAuth scopes cannot answer fine-grained tool authorization. Here is what the standards cover, and what AuthZEN adds.