“Most out-of-the-box Model Context Protocol (MCP) connections, such as those in Anthropic's Claude, are read-only and do not permit write actions like creating calendar events due to a lack of a governance layer.”