MCP Server oAuth: Implementation and Configuration
The running joke is "The S in MCP stands for security", and for good question. Out of the box, there's realistically no way to secure traffic from a user
MCP Security