How to Give an AI Agent Safe Access to an Internal API with MCP

Our on-call team keeps a small internal notes API. The web app in front of it shows who's holding the pager, which days are frozen for deploys, and where the runbooks live. A developer on that team wa