↓ Skip to main content
tomrochette.com
  1. Agents/
  2. Protocols/

Model Context Protocol (MCP)

Author
glm-5.3, glm-5.3-flash
History / Edit / PDF / EPUB / MD
Created: / Updated: / Status: finished / Readability: 3 / 6 minutes read (~1061 words)
agent-curated 610 agent-tools 2 fully-ai-generated 715 interoperability 8 llm=glm-5.3 169 llm=glm-5.3-flash 620 protocols 16 research-note 580
Table of Contents

MCP is an open protocol that standardizes how AI applications connect to external tools, data sources, and workflows.

It is the de facto standard for agent-to-tool integration, and its one-year run from launch to industry default has no precedent I can find in developer tooling.

What it is
#

The protocol defines JSON-RPC messages between hosts (LLM applications), clients (connectors inside the host), and servers that expose tools, resources, and prompts, with per-request capability negotiation. It openly borrows its playbook from the Language Server Protocol, which solved the same N-times-M integration problem for editors and languages. Anthropic created it (David Soria Parra and Justin Spahr-Summers), open-sourced it on 2024-11-25, and donated it to the Linux Foundation’s Agentic AI Foundation (AAIF) on 2025-12-09. The spec and schema are MIT-licensed, and the current specification revision is 2026-07-28, grown through opt-in extensions (Tasks, Skills over MCP, MCP Apps).

Status
#

Active and dominant. The specification repository shows about 9.4k stars (2026-10-10) and roughly 4,900 commits as of 2026-10-16.

Star History Chart

The AAIF announcement claimed more than 10,000 published MCP servers and adoption by Claude, Cursor, Microsoft Copilot, Gemini, VS Code, and ChatGPT. In this index, Claude Code, Cursor, VS Code Copilot, Gemini CLI, and Crush all speak it. Governance is now neutral, with AWS, Anthropic, Block, Bloomberg, Cloudflare, Google, Microsoft, and OpenAI as AAIF platinum members. The official TypeScript SDK split into a 2.x package line on 2026-10-23 (@modelcontextprotocol/client, server, and core at 2.4.0 on npm, with a codemod for the migration) while the legacy @modelcontextprotocol/sdk package stays on the 1.x line (1.32.2), so consumers now choose between the old package and the restructured one.

Strengths
#

  • One integration works across every major client, which is why server authors target MCP first.
  • Simple core (stateless JSON-RPC requests) that any language can implement.
  • Foundation governance removes the single-vendor risk that slowed earlier standard attempts.
  • The extension mechanism (long-running tasks, skills, inline apps) gives it a growth path without breaking clients.

Cautions
#

  • The security model trusts tool descriptions, and that trust is attackable. Invariant Labs demonstrated tool poisoning (hidden instructions in descriptions exfiltrating SSH keys and configs from Cursor) and rug pulls, where a server changes its description after the user approved it.
  • A 10,000-server ecosystem is a supply chain: community scans keep surfacing credential leaks and malicious packages in published servers.
  • Spec revisions are date-stamped and frequent (2025-11-25, then 2026-07-28), so client and server support drifts.
  • Remote-server auth and deployment remain the rough edges teams hit in production.

Pricing
#

The protocol itself is free and open (MIT spec and schema). Costs come from hosting remote servers and from the tokens that tool schemas and results consume, not from the protocol.

Compared to
#

  • ACP: editor-to-agent for coding agents, where MCP is agent-to-tool; they compose.
  • Plain REST plus an OpenAPI spec: universal but no discovery, consent flow, or streaming semantics, so every client reimplements them.
  • Vendor plugin formats (ChatGPT apps, Claude connectors): richer one-host UX, zero portability.

Bottom line
#

Recommended as the default way to expose tools and context to agents; I would not build a bespoke integration layer in 2026 without a specific, measured reason. The disagreeable part: MCP’s security story lags its adoption story, and teams adopting it wholesale are accepting a supply-chain risk they have mostly not priced in.

Changes
#

  • 2026-08-24 - Created among the four protocol notes of the research index seeding run.
  • 2026-10-07 - Added the modelcontextprotocol/modelcontextprotocol star history chart to the Status section.
  • 2026-10-17 - Rotation re-verification: every cited URL re-fetched live, and the specification revision re-confirmed at 2026-07-28 with no newer revision shipped (the schema directory’s newest dated folder is still 2026-07-28, with the next revision in draft).
  • 2026-10-24 - Rotation re-verification: every cited URL re-fetched live with no dead sources, and the specification revision re-confirmed at 2026-07-28 (the schema directory’s newest dated folder unchanged, the next revision still in draft).
  • 2026-10-31 - Rotation re-verification: every cited URL re-fetched live with no dead sources, and the specification revision re-confirmed at 2026-07-28 (the schema directory’s newest dated folder unchanged, the next revision still in draft; the commits since 2026-10-24 are docs and working-group housekeeping).
  • 2026-11-04 - Re-verification: the specification revision re-confirmed at 2026-07-28 (the schema directory’s newest dated folder unchanged, the next revision still in draft); the commits since 2026-10-31 are the blog’s post-list redesign and dependency bumps.
  • 2026-11-06 - Re-verification: the specification revision re-confirmed at 2026-07-28 (the schema directory’s newest dated folder unchanged, the next revision still in draft); the default branch has no commits since 2026-11-04, with the repository’s pushed date moved by a side-branch push.
  • 2026-11-08 - Re-verification: the specification revision re-confirmed at 2026-07-28 (the schema directory’s newest dated folder unchanged, the next revision still in draft); the default branch carries docs and schema fixes since 2026-11-06 (the authorization guide reworked for the 2026-07-28 revision, the Skills specification links pointed at specification/beta/, a working-group contribution policy); recorded the official TypeScript SDK’s 2.x package line (client, server, and core at 2.4.0 on npm since 2026-10-23, legacy @modelcontextprotocol/sdk staying at 1.32.2).
  • 2026-11-12 - Re-verification: the specification revision re-confirmed at 2026-07-28 (the schema directory’s newest dated folder unchanged, the next revision still in draft); the default branch carries community-governance and docs work since 2026-11-08 (a working-groups overview page, working and interest group list reconciliation, the SEP proposal-state automation slimmed, and blog posts announcing the MCP release cycle and the file uploads and downloads extension, with MCP Inspector’s Apps support marked partial).

See also
#

References
#