Hey! We built infrastructure that can provide ACLs around command & credential restrictions, using MCP as auth middleware encrypted credentials to prevent agent overpriviledge - see sealgate.ai and let me know if this solves any issues here