OpenAPI 3.0 has auth. You can turn OpenAPI specs into tool calls just as well, without giving your agents access to call curl and without leaking credentials.

The problem is often that OpenAPI schemas are often incomplete, since they used to be useful to humans even in an incomplete state.

MCP basically requires you to do the equivalent work of getting your OpenAPI schema complete. It’s just much easier to sell to your managers.