A sensitive MCP tool can update records. Which two controls remain necessary? Select TWO.

1. Grant anonymous write access to simplify discovery
2. Validate arguments and enforce business constraints before execution
3. Authenticate and authorize the caller for the operation
4. Let the tool's description replace backend permission checks