MCP security: what to log when an AI agent calls tools, and what the log can prove

· Dev.to