Constraining the Agent: What I Learned Wiring MCP Into a Legacy System

Notes from January 2026, when giving an AI agent live database access still felt reckless. Written...