In practice that’s a lot of the value MCPs are providing.

Technically it’d work just as well to have a thin API wrapper or cli tool the agent is allowed to access.