Infrastructure MCP servers are the most useful and the most dangerous. A practical way to decide what an agent may read, what it may change, and…