Securing MCP Servers That Give Agents Their Tools