Comment by verdverm

See my peer comment for some other thoughts.

What stops your agent from adding a new MCP server on its own? Would you consider that a gap in security posturing?