5,806 posts across the 5,299 API-bearing providers I track between August 7th and 15th. Last week the identity vendors reached into a drawer of old RFCs to answer who is calling. This week the network layer answered a different question — what is this traffic? — and answered it by inspecting headers and guessing. Cloudflare Gateway now detects MCP by protocol heuristics, Fingerprint will tell you which AI tool called your server, and OWASP has an MCP Top 10. Meanwhile Google did the opposite thing and put AI model routing inside an OpenAPI document, where it is declared rather than inferred. That contrast is the whole issue.