I build MCP servers that limit the LLM to specific commands.