Concept dictionary
Model Context Protocol (MCP)
Model Context Protocol (MCP) is an open protocol that standardizes how AI applications exchange context and capabilities with external services through a host-client-server architecture.
- Review state
- Reviewed in POC
- Freshness
- Current
- Version
- 1
Also called
- Model Context Protocol (MCP)
- Model Context Protocol
- MCP
Remember it this wayMCP is the language of the connection; a server is one participant.
In plain language
MCP gives compatible applications and services shared rules for discovering and using prompts, resources, and tools. The host application manages clients and user control; each client connects to a particular server. The protocol defines the exchange, while each implementation decides what capabilities to offer and authorize.
Why it matters
A shared protocol can reduce one-off integration work and make external capabilities more portable across AI applications. The same connection can expose data or actions, so clear permissions, isolation, and informed consent remain part of the architecture.
Example
A desktop AI application uses MCP clients to connect separately to a source-code server and a calendar server. Both integrations use the same protocol, but each server exposes different capabilities and keeps a separate connection boundary.
Common misconception
MCP is not a model, an MCP server, or blanket permission for an AI to use every connected system. It standardizes messages and capabilities. The host, client, server, and user still have distinct security and authorization responsibilities.
Related terms
Sources
- Model Context Protocol, “Architecture”specifies the host-client-server architecture, capability negotiation, and security boundaries.
- Model Context Protocol, “Server features overview”defines prompts, resources, and tools as server primitives with different control relationships.
Learn more
- Read [[mcp-server|MCP Server]] for the implementation role that exposes selected capabilities.
- Treat server output as an external trust boundary and evaluate risks such as [[prompt-injection|Prompt Injection]].