MCP plus a confirmation gate is basically the safe agent starter kit

one MCP server for the data, scoped tightly, plus a confirmation on anything consequential. it is not fancy but it covers most of what goes wrong.