Concept dictionary
MCP Server
An MCP server is a local program or remote service that implements the Model Context Protocol server role and exposes selected tools, resources, or prompts to an AI application's MCP client.
- Review state
- Reviewed in POC
- Freshness
- Current
- Version
- 1
Also called
- MCP Server
- MCP Servers
- Model Context Protocol Server
Remember it this wayThe protocol supplies the rules; the server offers capabilities through them.
In plain language
The server is the concrete endpoint on one side of an MCP connection. It advertises the capabilities it supports and responds to protocol requests. It might wrap local files, a company database, a cloud API, or a specialized workflow.
Why it matters
Each MCP server creates a distinct capability and trust boundary. Learners need to know what it exposes, where it runs, which data it can reach, who operates it, and what the host will allow before treating the connection as safe.
Example
A company builds an MCP server for its customer system. It exposes read-only tools for finding an account and retrieving approved support history, while omitting deletion and export actions. An AI application's MCP client connects to that server under the host's permission controls.
Common misconception
An MCP server is not the AI model and connecting one does not automatically grant every possible action. Servers can be local or remote, capabilities can be narrow, and server-provided descriptions or content should not be trusted merely because they arrived through MCP.
Related terms
Sources
- Model Context Protocol, “Architecture”defines MCP servers as local processes or remote services that expose focused context and capabilities to clients.
- Model Context Protocol, “Server features overview”describes the tools, resources, and prompts a server can provide.
Learn more
- Start with [[model-context-protocol|Model Context Protocol (MCP)]] to understand the full host-client-server relationship.
- Apply [[runtime-governance|Runtime Governance]] and [[prompt-injection|Prompt Injection]] controls at the capability boundary.