MCP servers, agent permissions, sandboxing and the plumbing between agents and the things they touch.
