We put an MCP endpoint in 49 business apps. Here is what a read-only key can and cannot do to an invoice register.