Production in Model Context Protocol

Lessons in this section

1. Security

   Defending MCP setups: over-broad tools, prompt injection, tool poisoning, confused deputy, token passthrough, SSRF, state handle hijacking, local server compromise and unsafe URLs.

2. Reliability and Operations

   Running MCP in production: classifying failures, error frames, safe retries, versioning and deprecation, health checks, audit logs, emergency disable, evaluation, cost and an improvement loop.

3. MCP Reference

   A quick-reference page for MCP 2026-07-28: MCP vs alternatives, roles, methods, error codes, HTTP statuses, headers, result fields, auth and security checklists, deprecations and a glossary.