I ship MCP servers and agent automations constantly. Personal infrastructure, benchmarks, cron-driven agents that run while I sleep. At this point, standing up a new one is routine — a day of focused work, often less.

Which is exactly why I keep getting one thing wrong.

Every time I put one of these in front of someone new — a reader, a friend, a fellow dev who hasn't touched agents yet — I expect the reaction I'd have: oh, neat, a tool server. What I get instead is a wall of questions. What can it access? What happens if it misbehaves? Why would I let an AI touch my files?

For a long time I read those questions as resistance. They're not. They're diligence — the same diligence I did years ago and then forgot about.

Familiarity is invisible