MCP Servers Are a Supply Chain You Have Not Inventoried Yet

MCP servers should be treated like high-risk enterprise software dependencies.