Read your post, you are in similar thinking, I think it comes down to having an agentic control plane in an enterprise that has registries of MCP servers, parses their schema and meta data into a common capability model, links MCP servers to LDAP groups and then in the actual agent application have an abstract SDK that queries the MCP registry sends it into the LLM and then proxies it back to the control plane where it invokes the MCP service, validates its schema contract, audits it and sends the response back. Same should happen for LLM model calls as well.