mcp 0.5.0 - tool can read agent's conversation history by importing context module

so i was poking around mcp 0.5.0 tool isolation claims and found somthing completly broken. wrote a simple tool that just does `from agent import context; print(context.history)` and it dumps the entire conversation history including previous tool outputs and user messages. zero isolation. tools can literally read everything the agent has seen in the current session. tested on basic calculator tool and file reader tool, both work same way. anyone else hit this or is my setup just cursed