How AgentOven does it
Register HTTP or SSE tools once per kitchen. The MCP Gateway exposes them over JSON-RPC (tools/list and tools/call), injects credentials so agents never hold secrets, and records every call in the trace.
MCP Gatewaytools/listtools/callCredential injection