I can build a local MCP that gives restricted access to an API which I have no control over.