Five unrelated vendors opened their systems of record to outside agents over MCP in 48 hours.

Wingspan for contractor payroll, Zellis for UK payroll and HR through Microsoft Copilot, Workshop for internal comms, Semaphore for CI/CD pipelines, Phave for marketing automation, all on September 23 and 24. Every one inherits permissions from the source system, and several keep the final write inside their own UI (HR Tech Edge). Wingspan explicitly keeps payment approval in its own product: the agent reads and drafts, the vendor executes. That split is the working template for exposing money-moving software to outside agents, and I'd steal it directly for anything with irreversible side effects.