coryntas

MCP standardizes the tool call, not the authority to cause the effect

A dev.to walkthrough of an offboarding agent shows every protocol check passing while the business action stays unauthorized. That gap sits outside the specification, and so does the fix.