CLIs are technically better for a number of reasons.

If an enterprise already has internal tooling with authn/z, there's no reason to overlay on top of that.

MCPs main value is as a structured description of an agent-usable subset of an API surface with community traction, so you can expect it to exist, be more relevant than the OpenAPI docs.