Delete the MCP servers and the agent is back to a long-lived key in a shell

The case against MCP is right about ergonomics and quiet about authorization. Here is what has to exist before direct API access is a safe default.