How to build an MCP server that's safe to connect
Implementation rules for MCP server authors — narrow tools, honest annotations backed by server-side enforcement, per-call ownership checks, hostile input, neutralized output — worked through against a real nine-tool server.