The MCP can be hosted on the server side, e.g. Atlassian does this now, and with Dynamic Client Registration you can OAuth to the MCP nicely. This is the way forward for MCPs; you can use oauth2-proxy and nginx to e.g. wrap an open source MCP with a layer of SSO and present it to your company if there's a need to host one that isn't run on the provider's infra.