Use Cases & Ecosystem

MCPA · 60 questions

• A team divides work for a new MCP integration among the server developer, the host application developer and the end user. Who is responsible for implementing the consent and approval UI shown before a tool runs?
• A platform team must control which local MCP servers employees run on managed laptops, knowing users install them the way they install editor extensions. Which starting posture does MCP's local server security guidance recommend?
• A contributor wants the MCP specification to add a new capability that every client and server could negotiate. How are proposed changes to the specification submitted?
• Two groups in the MCP project disagree about a design decision on which the Core Maintainers have already voted. Which role in MCP technical governance holds final decision authority and can veto that decision?
• A group of MCP community members meets regularly to discuss and articulate a problem the protocol should address, but it has not yet produced any SEP or implementation. What kind of group is this in MCP governance?
• An implementer asks how an MCP specification feature is retired and how long it stays in the specification once it is flagged for removal. Which states and minimum window does the feature lifecycle policy define?
• An existing MCP server uses sampling so that the client's model can summarize documents for it. Its owners have just learned that revision 2026-07-28 deprecated sampling. What is the appropriate plan?
• A code-analysis server learns which project folder to scan by asking the client for its roots. Now that revision 2026-07-28 has deprecated roots, how should the server get this information?
• A server operator must move to revision 2026-07-28 but still serve older clients that open with an initialize handshake. Which design lets one server handle both kinds of clients?
• A legacy client that only knows the initialize handshake connects over stdio to a server that supports only revision 2026-07-28, and the connection fails immediately. What resolves this?
• An AI governance reviewer must decide whether employees may connect their AI assistant to a new third-party remote MCP server that offers CRM tools. What should the reviewer examine before approving it?
• Before a new remote MCP server goes live, the security team reviews how it handles the OAuth access tokens that clients send it. Which behaviour must they confirm?
• A company is deploying a remote MCP server and asks who should run the OAuth authorization server that issues its access tokens. What does the MCP specification say about this role?
• A large enterprise wants its corporate identity provider to decide centrally which MCP servers each employee can reach, so that staff never authorize servers one by one and access can be revoked in one place. Which approach fits?
• A nightly batch job with no human present must call tools on a remote MCP server to reconcile records. Which authorization approach fits this machine-to-machine case?
• A company has built a useful MCP extension and wants it to become an official extension under the io.modelcontextprotocol prefix. Which sequence does the MCP project define?
• A team wants to prototype a new MCP extension idea inside the official MCP GitHub organization before writing a formal proposal. Which arrangement does the project provide for this?
• An internal knowledge-base tool must serve about 2,000 employees, with central updates and per-user access control, from a single deployment managed by the platform team. How should it be delivered as an MCP server?
• A developer preparing a contribution to the MCP project asks which license applies to code and specification contributions, and which applies to the project's documentation. What do the governance rules state?
• A large AI vendor that sponsors MCP development asks whether it can hold a guaranteed seat among the project's Core Maintainers. What do the governance rules say?
• A team is adding an AI coding assistant to its IDE. The assistant must read files in the open repository, inspect commit history, and create branches when the developer asks. How should this be designed with MCP?
• An enterprise chatbot must answer questions using data from the HR, finance and sales databases, each owned by a different department with its own access rules. Which MCP architecture fits best?
• A travel assistant needs three things from one MCP server: actions that book flights and hotels, the traveller's saved preferences as context, and a reusable plan-a-trip workflow that the user can start on demand. How should the server map these to primitives?
• A support team wants every agent to use the same approved refund-response workflow, started deliberately by the agent and filled in with an order number. Which MCP design fits?
• A tool starts a continuous-integration pipeline that can take 40 minutes. The client and an intermediary proxy both drop connections that stay idle for long periods. Which approach handles this best?
• A release tool on an MCP server must pause mid-operation until the user explicitly approves or rejects the deployment, then continue with that decision. Which mechanism fits under revision 2026-07-28?
• An MCP server needs the user's API key for a third-party service and later a card payment, and neither must ever be visible to the MCP client or the model. How should the server collect them?
• Users of a sales MCP server want results rendered as an interactive chart they can filter and drill into inside the conversation, without opening a separate web app. Which approach fits?
• A general-purpose desktop agent has 40 MCP servers configured but cannot know which ones a user's request will need until the conversation starts, and connecting all of them at startup crowds the model's context. What does MCP client guidance recommend?
• A remote MCP server on revision 2026-07-28 must scale out to many identical instances behind a load balancer. What does the protocol require to keep protocol state consistent across instances?
• A multi-tenant MCP gateway must route each tools/call to the correct tenant's backend based on a tenantId tool argument, without parsing JSON request bodies. How should the server enable this?
• A shared gateway serves many users, and a server's tools/list result is identical for everyone regardless of who is signed in. Which caching hints should the server return with that result?
• An assistant must react whenever one specific policy document, exposed by an MCP server as a resource, is updated. Which approach does revision 2026-07-28 provide?
• A host already uses progressive discovery, and midway through a conversation the model finds three more tools it needs. The LLM provider caches the prompt prefix, including the tools array. How should the host add those definitions without throwing away that cache?
• A host supports code mode. A user approves a model-written script that loops over 40 records and calls a server's deleterecord tool once per record from inside the sandbox. According to MCP client guidance, how should the host broker handle those 40 tool calls?
• A desktop AI assistant must let a single user search and summarize documents stored on that user's own laptop. Which way of running the MCP server fits best?
• A SaaS issue tracker wants to offer one MCP endpoint that any customer's MCP client can connect to, even clients the vendor has never seen before. Which design fits?
• An MCP server's scheduling tool must create events in each user's account on a third-party calendar service that uses OAuth. How should the server obtain access to that calendar?
• A bank's MCP servers are internal only and may not be listed publicly, but staff need a catalogue their MCP host applications can browse to find approved servers. Which approach fits?
• A host's stdio MCP server process crashes while two tools/call requests are in flight and a subscriptions/listen stream is open. What should the client do?
• A platform engineer asks what the official MCP Registry actually stores when a developer publishes a weather server whose code ships as an npm package. What is the answer?
• A developer sees MCP Registry server names such as io.github.alice/weather and com.example/billing and asks why they use this format. What is the reason?
• A team tries to publish metadata for an MCP server reachable only at mcp.acme-corp.internal to the official MCP Registry, and the submission is rejected. What is the most likely reason, and what should they do instead?
• A vendor building an MCP host application wants to let users browse and install servers. According to the registry documentation, where should the host get that server list?
• A security architect asks who scans MCP server code for vulnerabilities in the registry ecosystem. According to the registry documentation, what is the answer?
• A team writes its MCP host and client in one programming language using that language's official SDK, and its servers in another language with a different official SDK. What should they expect about interoperability?
• A developer adds a server that supports the Tasks extension and expects long tool calls to become tasks automatically, but every call still returns an ordinary result. What explains this?
• A client declares support for an extension, but the server it calls does not support that extension. According to the extension negotiation rules, how must the supporting side behave?
• A company that owns the domain example.com is publishing its first third-party MCP extension, a feature it calls audit-trail. Which extension identifier follows the MCP naming guidance?
• A team wants MCP clients and servers on the same host to communicate over a Unix domain socket instead of a subprocess's standard streams. What does the specification recommend for message framing?
• An older MCP server still exposes only the HTTP+SSE transport from protocol revision 2024-11-05, and the team asks whether to keep building on it. What is the right guidance?
• A server that implements only revision 2026-07-28 receives traffic from an older client: HTTP GET and DELETE requests to its MCP endpoint, and POSTs carrying Mcp-Session-Id and Last-Event-ID headers. How should the server respond?
• A dual-era client sends a modern request to an HTTP MCP server and receives 400 Bad Request. What should the client do next to determine whether to fall back to the legacy initialize handshake?
• A dual-era client has probed a server and found that it speaks the modern protocol. How long does the specification say the client should rely on that era determination?
• A server author wants the server's tools to behave consistently whichever MCP host connects to it, including hosts the author has never tested. Which approach best supports that portability?
• A platform team wants its MCP server to share reusable agent workflows, such as a code-review procedure with a checklist file, that hosts can discover and load on demand. What does the Skills over MCP extension provide?
• An MCP client connects to a server whose protected resource metadata later points to a different authorization server. Which client registration approach avoids re-registering with the new authorization server?
• A server author wants every conforming MCP client to be able to validate the server's tool input and output schemas without special configuration. Which choice best supports that?
• A community member asks how the official MCP Registry currently prevents spam submissions. Which set of measures does the registry documentation describe?
• A server ships an MCP App, a tool linked to a ui:// interactive view, but some customers use hosts that do not render MCP Apps. What should the server author do?