By design, MCP allows AI agents to run external tools and scripts ... OAuth 2.0 flows are now required, and resource server ...