A secure-by-default framework for building MCP servers on Azure Entra ID, enforcing OWASP API Security Top 10 controls with authentication, authorization, and rate limiting.
