Post

The missing layer is consent: skills choose intent, but MCP tools still need scoped, revocable permissions.