What is indeterministic about MCP servers? Most of them follow fairly simple rules, eg an MCP server to interact with Slack gives pretty deterministic responses to requests.

Or are you confusing the LLM / MCP client invoking the tools being non-deterministic?