The proposal currently restricts only the top-level browsing context to declare tools, see here: "Only a top-level browsing context, such as a browser tab can be a model context provider."
This means embedded frames can't declare tools, same or cross-origin. This was discussed at the last TPAC, notes here.