The solution is to not give agents access to MCP servers.

The entire MCP ecosystem is ludicrous. You’re paying for inference for an agent to make the same decisions over and over again, and yet the actions they’re taking can be so easily written by those same agents into a bash script you can run again and again, deterministically and for free.

MCP is the problem. Having agents “use a product on your behalf” is the problem.

The pattern you’re looking for is that agents should write scripts that use products for us, and that doesn’t need a new protocol.