wouldn't this defeat the point? Claude Code already has access to the terminal, adding specific instruction in the context is enough
To an LLM there’s not much difference between the list of sample commands above and the list of tool commands it would get from an MCP server. JSON and GNU-style args are very similar in structure. And presumably the command is enforcing constraints even better than the MCP server would.