Designing MCP tools an agent won't misuse

Typed inputs stop malformed calls. They don't stop an agent from calling the wrong tool with a well-formed, wrong argument. Here's how to design an MCP tool surface — constrained enums, safety annotations, typed errors — that an agent can't misuse, with real patterns from a 157-tool ERP server.