It's why I asked the question. Maybe I missed something.
If you're needing to give the model direct and broad access to your SqlServer instance...I don't get it.
Dedicated customer facing API is like whitelisting approved actions; MCP feels like getting an LLM to enforce a complex blacklist.
Now every website can create tools that gpt can use. So it's possible to have your users use AI without the need to pay for tokens.