MCP can also handle authorization, since you don't want to put your password to skills.md and send it to China