The security best practices from https://modelcontextprotocol.io are refreshingly concrete. The focus is not on abstract security theory, but on the areas where integrations and #AI agent interactions actually become risky in practice, such as weak consent handling, token passthrough and missing protection against #SSRF: https://modelcontextprotocol.io/docs/tutorials/security/security_best_practices