MCP, short for Model Context Protocol, is an open standard that lets AI assistants use the tools and data of other programs, for example your CRM, project software or accounting. Anthropic introduced MCP in November 2024. Since December 2025 the standard has belonged to the Agentic AI Foundation under the Linux Foundation, co-founded by Anthropic, Block and OpenAI. When the foundation launched, more than 10,000 MCP servers had already been published.
What problem does MCP solve?
Without a shared standard, every AI assistant needs its own connection to every program. With five assistants and twenty programs, that is a hundred separate integrations that all need maintaining.
With MCP, a program provides a so-called MCP server once. Every assistant that understands MCP can use it, much like a standard plug that fits every matching socket.
How does MCP work?
There are two sides:
- The MCP server sits with the program and offers tools, such as "search projects", "book time" or "check budget". It checks every request to see whether it is allowed.
- The MCP client is the AI assistant or an automation, such as Claude, ChatGPT or a workflow in n8n. It asks the server which tools exist and calls them with the right details.
For your team it looks like this: someone types "book two hours on the website relaunch project" in the chat. The assistant finds the project via the MCP server, books the time and confirms.
What does this look like in practice?
We developed our own MCP server for the project software Moco. With it, an AI assistant can search projects, book time and check the budget, with exactly the permissions we grant. We published the code on GitHub.
What should you watch for in terms of security?
An MCP server opens a program up to AI. That is why a few rules apply:
- Permissions as narrow as possible: where reading is enough, there is no writing.
- Approval for important actions: a person confirms bookings, deletions or payments.
- Only trusted servers: third-party MCP servers can inject hidden instructions into the AI. Only use servers whose origin you know.
- Store credentials securely: do not keep keys in plain text, and issue access with an expiry date.
- Logging: every call is stored and can be traced.
When is a dedicated MCP server worth it?
Ready-made MCP servers already exist for many well-known programs. A dedicated one is worth it if your team works with an AI assistant every day and needs data from a system that has no connection yet, or if you want finer control over what the AI may do. How MCP works together with agents is explained in AI agents for mid-sized companies.
Sources
- MCP blog: MCP joins the Agentic AI Foundation (9 December 2025)
- Agentic AI Foundation: formation of the AAIF
- Official MCP documentation