Without RBAC for Agent Skills and MCP, your entire organization basically has root access to your company
Let me paint a picture. Your company has rolled out Claude or ChatGPT as the standard AI tool. You've connected MCPs to Stripe, your HRIS, Datadog, your CRM, and Slack. A senior engineer set this up because they needed to answer hard cross-system questions and it works beautifully. Now a marketing intern sits down, opens the same LLM harness with the same MCP config, and types "show me revenue by customer for the last 12 months." They get it.