What is MCP (Model Context Protocol)?
Definition
The Model Context Protocol (MCP) is an open standard that lets AI applications connect to outside tools and data, such as a CRM, a file store or a database, through one common interface instead of a custom integration for each pairing.
Last updated 2026-10-18 · Flowmatix
How MCP works
MCP has three roles. A host is the AI application a person uses, such as a desktop assistant or a coding tool. Inside it, a client manages each connection. A server is a small program that exposes a particular system to the AI. According to the MCP specification, messages use the JSON-RPC 2.0 format, and servers can offer three kinds of capability:
- Tools: actions the model can call, such as "look up an order" or "create a calendar event".
- Resources: data the model or user can read, such as a policy document or a customer record.
- Prompts: templated instructions for common workflows.
Example: a property management firm builds an MCP server for its maintenance system. A staff member asks their assistant, "Which units on Queen Street have open plumbing tickets older than a week?" The assistant calls the server's search tool, gets the list and drafts follow-up notes, without anyone exporting a spreadsheet.
Anthropic introduced MCP and, in December 2025, donated it to the Agentic AI Foundation, a fund under the Linux Foundation co-founded with Block and OpenAI. That move made the protocol vendor-neutral.
Why it matters for your business
Before MCP, connecting an AI tool to each business system meant separate custom work for every combination. With a shared standard, one well-built server can be used by several MCP-compatible assistants, which lowers the cost of giving AI agents access to real work.
It also puts permissions in one place. The specification stresses user consent before tools run and before data is shared, so a business can decide exactly which actions an assistant may take.
Common mistakes
- Granting write or delete access when the assistant only needs to read.
- Installing community MCP servers without reviewing what they can access. The specification itself warns that tool descriptions from untrusted servers should not be trusted.
- Skipping logs, so nobody can see which actions the AI took and when.
- Connecting systems that hold personal data without checking privacy obligations first.
Frequently asked questions
Is MCP only for developers?
Building a server takes development work, but using one is often a matter of adding a connector in an AI app. Our article What is MCP, and why should a small business care? explains it without code.
Is MCP secure?
The protocol defines how to connect, not how safe each connection is. Security depends on authentication, limited permissions and monitoring, covered in our guide to connecting AI to business data safely.
Does MCP replace APIs?
No. MCP servers usually sit on top of existing APIs and translate them into a form AI tools can discover and use.
How Flowmatix can help
Our AI agent development work puts this into practice for businesses in Toronto and around the world. Get a personalised quote in about 3 minutes.
Related terms
Ready to see what your project costs?
Answer a few questions and get a personalised plan, a comparison with typical market prices, and a clear next step. No obligation, no sales pressure.