How do you handle mcp server security when your whole team needs access?
Running 5 mcp servers for claude code (filesystem, postgres, github, couple internal tools) and just realized they're all completely open. No auth, no scoping, no rate limits. Anyone's agent session can hit any tool with full permissions. The mcp spec doesn't have opinions about any of this which makes it worse.
Now my team wants access and I'm not comfortable just handing them the same unrestricted setup. How are people handling it when multiple devs share the same infrastructure?