MCP Server
The server-side role in the Model Context Protocol (MCP) architecture. An MCP Server is a tool service program that implements the MCP protocol specification, exposing tool capabilities to AI models that support MCP, enabling plug-and-play invocation of those capabilities.
Core Facts
MCP采用客户端-服务器架构，基于标准化的JSON-RPC通信协议
Each tool in MCP has a strict JSON Schema description, including the name, functional description, and parameter specifications
MCP Server 可以暴露工具（Tools）、资源（Resources）和提示词模板（Prompts）三类能力
Timeline (last 90 days)
When opening local hardware for AI to call, it is recommended to use read-only or restricted accounts for the MCP Server, limit accessible directories and commands through whitelists, and preferentially listen for sensitive channels on the local loopback address or intranet.
Many encryption software, approval systems, and internal tools in enterprises may not have open APIs, but by writing an adaptation layer (such as an MCP Server), Agents can gain the ability to act in closed environments.
When using npx -y to start the MCP Server, the -y parameter cannot be omitted, otherwise it will get stuck at the interactive confirmation.
When using a local MCP Server to control devices, the local computer must remain running for the MCP Server to work.
When directly controlling Tuya devices over the local network, the MCP Server needs to obtain the Local Key and complete pairing with the device before it can send encrypted commands.
Wrapping a REST API one-to-one as MCP tools (e.g., 80 endpoints corresponding to 80 tools) is a common design mistake that makes it hard for the model to choose; the correct approach is to organize a small number of tools by task shape, use verb-object naming, tighten the schema, and return only what the model needs.
The confused deputy problem is one of the MCP security risks: an MCP Server holding broad credentials performs operations on behalf of a user who should not have that permission.
At the end, the YouTube tech channel's video previews upcoming content: how to write and deploy a real MCP Server on your own server by hand.
With Python's FastMCP library, a few lines of configuration can turn a local machine into a standard MCP Server for the cloud or GPT to connect to.
Invariant Lab created an Issue containing malicious instructions in a public repository; after reading it, the AI accessed a private repository and wrote private information into a public Pull Request.
40 more timeline events
All Facts (20)
MCP采用客户端-服务器架构，基于标准化的JSON-RPC通信协议
90%VerifiedEach tool in MCP has a strict JSON Schema description, including the name, functional description, and parameter specifications
90%VerifiedMCP Server 可以暴露工具（Tools）、资源（Resources）和提示词模板（Prompts）三类能力
90%VerifiedMCP采用客户端-服务器架构，AI编程工具作为MCP客户端，外部服务作为MCP服务器
80%VerifiedVia the MCP protocol, Claude Code can directly connect to external services such as browsers, databases, and GitHub.
80%VerifiedThe design philosophy of MCP is similar to the unification concept of the USB-C interface, defining a universal client/server architecture that enables AI models to call any external tool in a standardized manner.
80%VerifiedAfter an MCP client connects to a server, it first performs Capability Negotiation to query the tools, resources, and prompt templates provided by the server
80%VerifiedEntering the /mcp command in Claude Code allows users to view the status of all connected MCP servers.
75%VerifiedFastMCP是MCP Python SDK的高层封装，借鉴了FastAPI的设计哲学，通过Python装饰器将普通函数转化为MCP工具
75%VerifiedEvery protected MCP server must publish a JSON document located at /.well-known/oauth-protected-resource, declaring the server's identity, supported permission scopes, and the authorization servers qualified to issue tokens.
65%VerifiedIn an MCP Server, a Tool is the smallest capability unit exposed for upper-level Agent invocation, and the tutorial uses a decorator approach for tool declaration
65%VerifiedThe AWS MCP server provides agents with a unified entry point, enabling them to discover and invoke various AWS services.
65%VerifiedThe principle of least privilege requires that every user, program, or service within a system be granted only the minimum access permissions necessary to perform their work.
65%VerifiedApplying the principle of least privilege can scope permissions for MCP server tools and data, reducing the blast radius caused by impersonation.
65%VerifiedAt the authorization layer, an MCP server can act as an intermediary proxy responsible for holding, managing, and rotating access credentials, so that the Agent itself does not need to directly handle the underlying keys
65%VerifiedAn AI application only needs to implement an MCP client once to connect to all services that support the protocol, thereby significantly reducing integration costs.
65%VerifiedIn MCP's security design, tool invocations are stipulated to require explicit user authorization, and resource access is constrained by permission boundaries.
65%VerifiedWhen a Client connects for the first time, an MCP Server performs a handshake process and returns the supported tool list, capability descriptions, JSON Schema definitions for input parameters, and return value formats.
65%VerifiedA single MCP Host can simultaneously connect to multiple MCP Clients, with each Client interfacing with one Server to enable parallel invocation of multiple external capabilities.
65%VerifiedThe design of MCP Server follows the principle of least privilege, with each Server exposing only the tools within its area of responsibility
65%