I think you may want to look at ChatGPT Apps. It’s like a React app you can embed in the chat directly. The LLM cannot see the app itself , only whet your MCP actually sends to the agent. We did this with a customer and it looks very cool and we can do all sorts of advanced things like any UI can without agent calling tools unless you want it to.