fix(mcp): keep the whole backup surface out of the assistant's toolbox

fix(mcp): keep the whole backup surface out of the assistant's toolbox #100