As MCP reaches real use, defining a tool is only the starting point. A server needs a clear contract, authorization boundaries, operational behavior, and accountable ownership.