I've noticed similar flakiness with MCP tools that rely on 'fire-and-forget' side effects depending on the client harness.