This has been hashed to death and back. The mcp allows a separation between the agent and the world, at its most basic not giving the agent your token or changing a http header , forcing a parameter.

Well yes you don’t need those things all the time and who knows if the inventor of mcp had this idea in mind but here we are