MCP is not mature enough to put servers in an Internet facing position. Unless you put gateways (inspecting JWTs, filtering out sensitive data) in front of them. Spec still has a long way to go, especially on the Streamable HTTP/SSE + OAuth front.