An MCP server exposes a tool for updating records. Which boundary must still be enforced?

1. A generated role description can replace backend permission checks
2. Tool discovery alone grants every caller write access
3. Authentication, per-operation authorization, argument validation, and controlled execution
4. A successful TCP connection proves business authorization