{"id":2633,"date":"2025-07-19T23:51:43","date_gmt":"2025-07-19T23:51:43","guid":{"rendered":"https:\/\/violethoward.com\/new\/5-key-questions-your-developers-should-be-asking-about-mcp\/"},"modified":"2025-07-19T23:51:43","modified_gmt":"2025-07-19T23:51:43","slug":"5-key-questions-your-developers-should-be-asking-about-mcp","status":"publish","type":"post","link":"https:\/\/violethoward.com\/new\/5-key-questions-your-developers-should-be-asking-about-mcp\/","title":{"rendered":"5 key questions your developers should be asking about MCP"},"content":{"rendered":" \r\n<br><div>\n\t\t\t\t<div id=\"boilerplate_2682874\" class=\"post-boilerplate boilerplate-before\">\n<p><em>Want smarter insights in your inbox? Sign up for our weekly newsletters to get only what matters to enterprise AI, data, and security leaders.<\/em> <em>Subscribe Now<\/em><\/p>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-wide\"\/>\n<\/div><p>The Model Context Protocol (MCP) has become one of the most talked-about developments in AI integration since its introduction by Anthropic in late 2024. If you\u2019re tuned into the AI space at all, you\u2019ve likely been inundated with developer \u201chot takes\u201d on the topic. Some think it\u2019s the best thing ever; others are quick to point out its shortcomings. In reality, there\u2019s some truth to both.<\/p>\n\n\n\n<p>One pattern I\u2019ve noticed with MCP adoption is that skepticism typically gives way to recognition: This protocol solves genuine architectural problems that other approaches don\u2019t. I\u2019ve gathered a list of questions below that reflect the conversations I\u2019ve had with fellow builders who are considering bringing MCP to production environments.\u00a0<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-1-why-should-i-use-mcp-over-other-alternatives\">1. Why should I use MCP over other alternatives?<\/h2>\n\n\n\n<p>Of course, most developers considering MCP are already familiar with implementations like OpenAI\u2019s custom GPTs, vanilla function calling, Responses API with function calling, and hardcoded connections to services like Google Drive. The question isn\u2019t really whether MCP fully <em>replaces <\/em>these approaches \u2014 under the hood, you could absolutely use the Responses API with function calling that still connects to MCP. What matters here is the resulting stack.<\/p>\n\n\n\n<p>Despite all the hype about MCP, here\u2019s the straight truth: It\u2019s not a massive technical leap. MCP essentially \u201cwraps\u201d existing APIs in a way that\u2019s understandable to large language models (LLMs). Sure, a lot of services already have an OpenAPI spec that models can use. For small or personal projects, the objection that MCP \u201cisn\u2019t that big a deal\u201d is pretty fair.<\/p>\n\n\n\n<div id=\"boilerplate_2803147\" class=\"post-boilerplate boilerplate-speedbump\">\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p><strong>The AI Impact Series Returns to San Francisco &#8211; August 5<\/strong><\/p>\n\n\n\n<p>The next phase of AI is here &#8211; are you ready? Join leaders from Block, GSK, and SAP for an exclusive look at how autonomous agents are reshaping enterprise workflows &#8211; from real-time decision-making to end-to-end automation.<\/p>\n\n\n\n<p>Secure your spot now &#8211; space is limited: https:\/\/bit.ly\/3GuuPLF<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n<\/div><p>The practical benefit becomes obvious when you\u2019re building something like an analysis tool that needs to connect to data sources across multiple ecosystems. Without MCP, you\u2019re required to write custom integrations for each data source and each LLM you want to support. With MCP, you implement the data source connections <em>once<\/em>, and any compatible AI client can use them.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-2-local-vs-remote-mcp-deployment-what-are-the-actual-trade-offs-in-production\">2. Local vs. remote MCP deployment: What are the actual trade-offs in production?<\/h2>\n\n\n\n<p>This is where you really start to see the gap between reference servers and reality. Local MCP deployment using the stdio programming language is dead simple to get running: Spawn subprocesses for each MCP server and let them talk through stdin\/stdout. Great for a technical audience, difficult for everyday users.<\/p>\n\n\n\n<p>Remote deployment obviously addresses the scaling but opens up a can of worms around transport complexity. The original HTTP+SSE approach was replaced by a March 2025 streamable HTTP update, which tries to reduce complexity by putting everything through a single \/messages endpoint. Even so, this isn\u2019t really needed for most companies that are likely to build MCP servers.<\/p>\n\n\n\n<p>But here\u2019s the thing: A few months later, support is spotty at best. Some clients still expect the old HTTP+SSE setup, while others work with the new approach \u2014 so, if you\u2019re deploying today, you\u2019re probably going to support both. Protocol detection and dual transport support are a must.<\/p>\n\n\n\n<p>Authorization is another variable you\u2019ll need to consider with remote deployments. The OAuth 2.1 integration requires mapping tokens between external identity providers and MCP sessions. While this adds complexity, it\u2019s manageable with proper planning.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-3-how-can-i-be-sure-my-mcp-server-is-secure\">3. How can I be sure my MCP server is secure?<\/h2>\n\n\n\n<p>This is probably the biggest gap between the MCP hype and what you actually need to tackle for production. Most showcases or examples you\u2019ll see use local connections with no authentication at all, or they handwave the security by saying \u201cit uses OAuth.\u201d\u00a0<\/p>\n\n\n\n<p>The MCP authorization spec <em>does <\/em>leverage OAuth 2.1, which is a proven open standard. But there\u2019s always going to be some variability in implementation. For production deployments, focus on the fundamentals:\u00a0<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Proper scope-based access control that matches your actual tool boundaries\u00a0<\/li>\n\n\n\n<li>Direct (local) token validation<\/li>\n\n\n\n<li>Audit logs and monitoring for tool use<\/li>\n<\/ul>\n\n\n\n<p>However, the biggest security consideration with MCP is around tool execution itself. Many tools need (or <em>think<\/em> they need) broad permissions to be useful, which means sweeping scope design (like a blanket \u201cread\u201d or \u201cwrite\u201d) is inevitable. Even without a heavy-handed approach, your MCP server may access sensitive data or perform privileged operations \u2014 so, when in doubt, stick to the best practices recommended in the latest MCP auth draft spec.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-4-is-mcp-worth-investing-resources-and-time-into-and-will-it-be-around-for-the-long-term\">4. Is MCP worth investing resources and time into, and will it be around for the long term?<\/h2>\n\n\n\n<p>This gets to the heart of any adoption decision: Why should I bother with a flavor-of-the-quarter protocol when everything AI is moving so fast? What guarantee do you have that MCP will be a solid choice (or even around) in a year, or even six months?\u00a0<\/p>\n\n\n\n<p>Well, look at MCP\u2019s adoption by major players: Google supports it with its Agent2Agent protocol, Microsoft has integrated MCP with Copilot Studio and is even adding built-in MCP features for Windows 11, and Cloudflare is more than happy to help you fire up your first MCP server on their platform. Similarly, the ecosystem growth is encouraging, with hundreds of community-built MCP servers and official integrations from well-known platforms.\u00a0<\/p>\n\n\n\n<p>In short, the learning curve isn\u2019t terrible, and the implementation burden is manageable for most teams or solo devs. It does what it says on the tin. So, why would I be cautious about buying into the hype?<\/p>\n\n\n\n<p>MCP is fundamentally designed for current-gen AI systems, meaning it assumes you have a human supervising a single-agent interaction. Multi-agent and autonomous tasking are two areas MCP doesn\u2019t really address; in fairness, it doesn\u2019t really need to. But if you\u2019re looking for an evergreen yet still somehow bleeding-edge approach, MCP isn\u2019t it. It\u2019s standardizing something that desperately needs consistency, not pioneering in uncharted territory.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-5-are-we-about-to-witness-the-ai-protocol-wars\">5. Are we about to witness the \u201cAI protocol wars?\u201d<\/h2>\n\n\n\n<p>Signs are pointing toward some tension down the line for AI protocols. While MCP has carved out a tidy audience by being early, there\u2019s plenty of evidence it won\u2019t be alone for much longer.<\/p>\n\n\n\n<p>Take Google\u2019s Agent2Agent (A2A) protocol launch with 50-plus industry partners. It\u2019s complementary to MCP, but the timing \u2014 just weeks after OpenAI publicly adopted MCP \u2014 doesn\u2019t feel coincidental. Was Google cooking up an MCP competitor when they saw the biggest name in LLMs embrace it? Maybe a pivot was the right move. But it\u2019s hardly speculation to think that, with features like multi-LLM sampling soon to be released for MCP, A2A and MCP may become competitors.<\/p>\n\n\n\n<p>Then there\u2019s the sentiment from today\u2019s skeptics about MCP being a \u201cwrapper\u201d rather than a genuine leap forward for API-to-LLM communication. This is another variable that will only become more apparent as consumer-facing applications move from single-agent\/single-user interactions and into the realm of multi-tool, multi-user, multi-agent tasking. What MCP and A2A don\u2019t address will become a battleground for another breed of protocol altogether.<\/p>\n\n\n\n<p>For teams bringing AI-powered projects to production today, the smart play is probably hedging protocols. Implement what works now while designing for flexibility. If AI makes a generational leap and leaves MCP behind, your work won\u2019t suffer for it. The investment in standardized tool integration absolutely will pay off immediately, but keep your architecture adaptable for whatever comes next.<\/p>\n\n\n\n<p>Ultimately, the dev community will decide whether MCP stays relevant. It\u2019s MCP projects in production, not specification elegance or market buzz, that will determine if MCP (or something else) stays on top for the next AI hype cycle. And frankly, that\u2019s probably how it should be.<\/p>\n\n\n\n<p><em>Meir Wahnon is a co-founder at Descope.<\/em><\/p>\n\n\n\n\n<div id=\"boilerplate_2660155\" class=\"post-boilerplate boilerplate-after\"><div class=\"Boilerplate__newsletter-container vb\">\n<div class=\"Boilerplate__newsletter-main\">\n<p><strong>Daily insights on business use cases with VB Daily<\/strong><\/p>\n<p class=\"copy\">If you want to impress your boss, VB Daily has you covered. We give you the inside scoop on what companies are doing with generative AI, from regulatory shifts to practical deployments, so you can share insights for maximum ROI.<\/p>\n<p class=\"Form__newsletter-legal\">Read our Privacy Policy<\/p>\n<p class=\"Form__success\" id=\"boilerplateNewsletterConfirmation\">\n\t\t\t\t\tThanks for subscribing. Check out more VB newsletters here.\n\t\t\t\t<\/p>\n<p class=\"Form__error\">An error occured.<\/p>\n<\/p><\/div>\n<div class=\"image-container\">\n\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/venturebeat.com\/wp-content\/themes\/vb-news\/brand\/img\/vb-daily-phone.png\" alt=\"\"\/>\n\t\t\t\t<\/div>\n<\/p><\/div>\n<\/div>\t\t\t<\/div>\r\n<br>\r\n<br><a href=\"https:\/\/venturebeat.com\/ai\/5-key-questions-your-developers-should-be-asking-about-mcp\/\">Source link <\/a>","protected":false},"excerpt":{"rendered":"<p>Want smarter insights in your inbox? Sign up for our weekly newsletters to get only what matters to enterprise AI, data, and security leaders. Subscribe Now The Model Context Protocol (MCP) has become one of the most talked-about developments in AI integration since its introduction by Anthropic in late 2024. If you\u2019re tuned into the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":2634,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[33],"tags":[],"class_list":["post-2633","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-automation"],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/violethoward.com\/new\/wp-content\/uploads\/2025\/07\/cfr0z3n_vibrant_expressionist_blocky_messy_simple_shapes_minima_63d1b56e-29a6-4cf4-a7a8-58e9fbfbe030.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/violethoward.com\/new\/wp-json\/wp\/v2\/posts\/2633","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/violethoward.com\/new\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/violethoward.com\/new\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/violethoward.com\/new\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/violethoward.com\/new\/wp-json\/wp\/v2\/comments?post=2633"}],"version-history":[{"count":0,"href":"https:\/\/violethoward.com\/new\/wp-json\/wp\/v2\/posts\/2633\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/violethoward.com\/new\/wp-json\/wp\/v2\/media\/2634"}],"wp:attachment":[{"href":"https:\/\/violethoward.com\/new\/wp-json\/wp\/v2\/media?parent=2633"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/violethoward.com\/new\/wp-json\/wp\/v2\/categories?post=2633"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/violethoward.com\/new\/wp-json\/wp\/v2\/tags?post=2633"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}<!-- This website is optimized by Airlift. Learn more: https://airlift.net. Template:. Learn more: https://airlift.net. Template: 69e302c146fa5c92dc28ac12. Config Timestamp: 2026-04-18 04:04:16 UTC, Cached Timestamp: 2026-04-29 15:25:37 UTC -->