What an MCP tools/list response cannot prove
Static tool metadata can reveal important exposure. It cannot prove identity, enforcement, runtime behavior, or audit completeness.
Read articlenull.select journal
Notes from the boundary between MCP clients and business systems.
Engineering detail on exposed tools, authenticated identity, deterministic policy, release integrity, and linked audit evidence.