Everything wrong with MCP

In just the past few weeks, the Model Context Protocol (MCP) has rapidly grown into the de-facto standard for integrating third-party data and tools with LLM-powered chats and agents. While the internet is full of some very cool things you can do with it, there are also a lot of nuanced vulnerabilities and limitations. In this post and as an MCP-fan, I’ll enumerate some of these issues and some important considerations for the future of the standard, developers, and users. Some of these may not even be completely MCP-specific but I’ll focus on it, since it’s how many people will first encounter these problems What is MCP and what’s it useful for? There are a bajillion other more SEO-optimized blogs answering this question but in case it’s useful, here’s my go at it: MCP allows third-party tools and data sources to build plugins that you can add to your assistants (i.e. Claude, ChatGPT, Cursor, etc). These assistants (nice UIs built on text-based large language models) operate on “to ... Read full article.