You nailed it! There are established tools that handle the security model. MCP is the 5th leg.