Similar to how we expose REST controllers as tools, we could do the same with an allowlist of WP-CLI commands. Use at your own risk 😄