You give it a key of course! And if that doesn’t fit your security model and threat vectors, simply give the key to another MCP.