MCP gateway enforcing per-(agent, tool) budget caps.
Speaks the JSON-RPC tools/call subset over HTTP only — not the full MCP server spec, and no stdio transport.
tools/call