MCP in production

What changes when an MCP server moves from localhost to real users, real accounts, and real permissions.