Right now, sampling cannot use more than the tools provided by the MCP server itself. We should permit adding to this list specifically during sampling, as there are things that may make sense during these kind of recursive LLM calls, but would not make sense for the client to invoke.