Don't let AI agents bypass your app and hit the database directly

The author argues that MCP tools should call application APIs, not production databases, to enforce validation, authorization, and audit logging. They propose using OpenAPI as the contract for MCP tools, starting with read-only operations. This approach avoids creating a hidden second application that bypasses business logic.