MCP lets the agent see what capabilities are available, while agent flow handles actual execution and guarantees idempotency, retries and auditing; any action involving funds, approvals or data writes should be encapsulated in a flow, with permission checks and logging done at the flow layer.