Since we've been discussing that there can be multiple Agents that can use a site's declared functionality, one question is can that happen in parallel. I'd say no, it'll be an extremely rare case and makes the execution unnecessarily complicated for the site. The simple thing to do is for the browser to abort existing tool executions from the current Agent if the user wants to allow another Agent to connect.