It's a similar problem faced by CICD pipelines. e.g. engineers (delegator) trigger pipelines tasks via APIs (MCP) which sees pipeline run terraform (agent) code which makes stuff be built and changed on various platforms, including configuring and interacting with other (upstream) services.
I feel like when CICD systems are well built, they're built assuming the user/engineer is completely non-deterministic, like an unpredictable agent.
