The most common mistake that I see here is people thinking only MCP can be bound to a server and store secrets and be called remotely

No, a CLI with RPC can do exactly that, just smaller. It goes lower in the exact same stack without the fluff.