MCP is the right choice for normalizing retail ERP integrations. One gap that becomes obvious once an agent has write access: the spec doesn't define agent-level identity, so implementations end up threading principal IDs through tool arguments to keep audit trails meaningful. CAI's agent wallet protocol with signed intents was designed for exactly this pattern.