Should we warn the user and/or disable deleting the MCP server if any of the tools are being used in agents?