MCP OAuth Token Audience Checks: A Multi-Tenant AI Agent Security Runbook
Production engineering guidance for securing remote MCP servers with OAuth audience-bound access tokens, resource metadata, least privilege, tenant isolation and negative tests.