SSSamarth Sinha

Note

Agents and MCP: giving AI tools without giving away the keys

The Model Context Protocol standardises how agents reach tools and data. Governance is still your job.

Nov 2026 · 1 min read

  • Agentic AI
  • MCP
  • Security
An agent reaching tools through MCP servers with scoped access User or schedule to Agent. Agent to MCP client. MCP client to MCP server: data. MCP client to MCP server: tickets. MCP client to MCP server: actions. MCP server: data to Audit log. MCP server: tickets to Audit log. MCP server: actions to Human approval. User or schedule starts a task Agent plans tool calls MCP client in the agent host MCP server: data read-only views MCP server: tickets scoped token MCP server: actions side effects Audit log every call and input Human approval before write actions
IllustrativeAn agent reaching tools through MCP servers with scoped accessScroll →

What MCP standardises

The Model Context Protocol defines how an AI application (the host, through an MCP client) connects to servers that expose tools, resources and prompts. One protocol replaces a custom integration per tool, which makes it easy to give an agent a lot of reach, quickly.

Governance you still need

  1. Least privilege per server. Each server gets narrowly scoped credentials: read-only database views, a ticketing token limited to one project.
  2. Separate reading from acting. Put tools with side effects behind their own server and route them through human approval.
  3. Treat tool output as data. Content returned by tools can carry prompt-injection attempts; it must never change the agent's instructions or permissions.
  4. Log every call: the tool, inputs, outputs and the identity the agent acted for, so any action can be reconstructed.
  5. Pin and review servers. Install servers from sources you trust, pin versions, and review what each one can reach.
  6. Budgets and rate limits. Cap calls and spend per task; agents can loop.

A simple rule

If you wouldn't give a new contractor the permission on day one, don't give it to an agent.