Anthropic’s agent containment post makes a strong implicit case for MCP gateways: contain agents at a deterministic boundary and treat every allowlist as a capability grant. Zuplo argues this is exactly what a well-designed MCP gateway provides without custom code.