When it comes to MCPs, everything we know about API design is wrong