MCP’s best feature is also its sharpest edge: it makes tools easy to connect to agents. That is great when the tool is a harmless demo endpoint. It is less cute when “tools” means ticket systems, source repositories, customer records, deployment hooks, database helpers, browser automation, and whatever internal