There's still an agent between the user and the LLM. The model isn't making the tool calls and has no mechanism of its own to accomplish this.

heh, relevant to the "do what now?" thread, I didn't recognize that initialism https://github.com/universal-tool-calling-protocol

I'll spare the audience the implied XKCD link