On giving AI agents real account access without giving them the whole house.
The official server is read-only; community servers write without bounds. The missing middle is typed grants with priced budget changes.