Off the top of my head: * Your agent can easily be configured to always allow certain MCP tools. This is very hard to do for only certain REST endpoints. This

Off the top of my head: * Your agent can easily be configured to always allow certain MCP tools. This is very hard to do for only certain REST endpoints. This is even more relevant in enterprise settings, where permission configs might be done centrally. * If the provider wants to change how an endpoint works, it's a breaking change for a REST API. Not with MCP, as the "endpoints" (tools) are dynamic and tell the agent how to use them.