MCP is good for isolation / security domain. I don’t what my business analysts to pull down a read only DB credentials and make my DB network accessible to them; but I can proxy into a private DB through MCP and guard the MCP with oauth (or tailscale is what I’m using now)