So I have been experimenting with putting IDEs in apps, and I was considering a json-rpc interface too, so the MCP apps thing makes sense to me. With MCP you can dynamically add to the MCP tool list, so the inner app can offer services as well. So you could code an integration inside the app, and then that integration can be offered a service to the dialog bot, or the outer-bot can code an integration inside the app... to extend its reach. The value is the MCP app is a sandbox, so its safer, maybe it holds credentials? It becomes a substrate for the bot to use, that is somehow a safer boundary, but it can offer the extensibility of the python code environment but without being tied to python. I can imagine putting an embedded linux as an MCP app. The statefulness is however much you want, I have an MCP that offers an export service to a bot, so then it chooses whether to save state or not, and can save that file or not. (this is not with MCP Apps though, this is with channel server but I think it ends up similar)