Vouchsafe
The letting agent gets an answer, not your life. Your facts stay in your browser; a WebMCP question comes back as one word. Withdraw it, and the tool stops existing on their side mid-conversation.
Core trick
Keeps facts client-side and exposes a WebMCP tool that returns one-word answers, unregistering the tool when consent is withdrawn.