The case against MCP is right about ergonomics and quiet about authorization. Here is what has to exist before direct API access is a safe default.
Delete the MCP servers and the agent is back to a long-lived key in a shell
calendar_today
September 23, 2026
domain
workos