Secure Model Context Protocol (MCP) servers with token-based authentication, granular OAuth scopes, and least-privilege tool execution policies.