Model Context Protocol

The Model Context Protocol (MCP) is an open standard, introduced by Anthropic on Nov 25, 2024, for connecting AI applications such as Claude to outside tools and data through MCP servers. OpenAI, Google and Microsoft support it, and Anthropic donated it to the Linux Foundation's Agentic AI Foundation on Dec 9, 2025.

The Model Context Protocol (MCP) is an open standard for connecting AI applications to the systems where data and tools live: a service publishes an MCP server once, and any AI app that speaks MCP (an MCP host, such as Claude, ChatGPT or VS Code) can use its tools and data without a custom integration. Anthropic introduced it on Nov 25, 2024, calling it a new standard for linking AI assistants to the systems where data lives. It was created at Anthropic by David Soria Parra and Justin Spahr-Summers. On Dec 9, 2025, Anthropic donated MCP to the Agentic AI Foundation, a fund under the Linux Foundation, so no single company owns it.

MCP's own documentation likens it to a USB-C port for AI applications: one plug shape instead of a different cable for every device (OpenAI Agents SDK docs, quoting the MCP docs).

Quick facts

Introduced Nov 25, 2024, by Anthropic
Steward Agentic AI Foundation (Linux Foundation) since Dec 9, 2025
Current spec 2026-07-28 (as of Nov 6, 2026)
License Apache 2.0 for code and specs, CC BY 4.0 for docs
Transports stdio (local) and Streamable HTTP (remote)
Public servers "More than 10,000 active", per Anthropic, Dec 9, 2025
Home modelcontextprotocol.io

What does MCP standardize?

MCP fixes how three parts talk to each other (Architecture overview):

  • Host: the AI application, such as Claude Desktop, Claude Code or VS Code.
  • Client: a connection the host opens for each server.
  • Server: a program offering context and actions. A local server (for example a filesystem server) runs on your machine over stdio; a remote one (for example Sentry's) runs as a web service over Streamable HTTP.

Messages are JSON-RPC 2.0. A server can offer three kinds of things, called primitives:

  1. Tools: functions the model can call, such as running a database query or creating a ticket.
  2. Resources: data the app can read, such as file contents or a database schema.
  3. Prompts: reusable templates, such as a prepared instruction with examples.

Clients can in turn let a server ask the user for input (elicitation). Apps find tools with tools/list and run them with tools/call.

How has the spec changed?

Versions are dates marking the last breaking change: 2024-11-05, 2025-03-26, 2025-06-18, 2025-11-25 and the current 2026-07-28.

The 2026-07-28 version is the biggest change so far: MCP became stateless. It dropped the initialize handshake and the Mcp-Session-Id header, so every request carries its own version and capabilities; moved tasks into an official extension; and deprecated three client features, Roots, Sampling and Logging (Key Changes 2026-07-28). Deprecated features stay at least twelve months before removal, and older tutorials describe the earlier, handshake-based protocol.

Who supports MCP?

At launch, Anthropic named Block and Apollo as adopters and shipped servers for Google Drive, Slack, GitHub, Git, Postgres and Puppeteer. By MCP's first anniversary on Nov 25, 2025, the large AI companies had joined:

  • OpenAI said MCP is now "a key part of how we build at OpenAI", across ChatGPT and its developer platform; its Agents SDK supports local and remote MCP servers.
  • Google said it supports MCP "across Gemini", including Gemini CLI, and published servers for Google Maps and Google Cloud databases.
  • Microsoft said Foundry grew from a small set of tools to thousands because of MCP; GitHub runs a GitHub MCP Server.
  • AWS said it started and keeps contributing to MCP.

Anthropic's Dec 9, 2025 count: MCP adopted by ChatGPT, Cursor, Gemini, Microsoft Copilot and Visual Studio Code, with 97 million monthly SDK downloads across Python and TypeScript. These are the companies' own statements; exact first-adoption dates were not confirmed at a primary source.

The Agentic AI Foundation

The Agentic AI Foundation (AAIF) was co-founded by Anthropic, Block and OpenAI, with support from Google, Microsoft, AWS, Cloudflare and Bloomberg (Anthropic, Dec 9, 2025). MCP was a founding project beside Block's goose and OpenAI's AGENTS.md, and Anthropic said MCP's governance would stay unchanged. Its maintainers decide changes through Specification Enhancement Proposals, with no seats reserved for any company (Governance). Anthropic later gave the AAIF its Agent Skills standard too, on Oct 22, 2026.

MCP Apps and the MCP Registry

MCP Apps is an official extension that lets a server send an interactive interface (a chart, a form, a dashboard) that the host shows inside the chat in a sandboxed frame (MCP Apps). Claude, Claude Desktop, VS Code GitHub Copilot, Microsoft 365 Copilot and Goose support it. In the Claude apps it powers the interactive Connectors launched on Jan 26, 2026 with Asana, Figma, Slack and others.

The MCP Registry is the official public catalog of MCP servers, backed by Anthropic, GitHub, PulseMCP and Microsoft. It is still in preview, and its page warns of possible breaking changes or data resets before general availability (The MCP Registry).

How Claude uses MCP

Is MCP safe?

MCP moves risk rather than removing it: an MCP server can read data and take actions with whatever access you give it. The specification's own security guide lists the main attacks (Security Best Practices):

  • Local server compromise: a one-click install can run any command with your privileges, so clients must show the exact command and ask first.
  • Confused deputy and token passthrough: proxy servers that forward or accept the wrong OAuth tokens can give an attacker a user's access; servers must only accept tokens issued to them.
  • Server-side request forgery: a malicious server can point a client at internal addresses such as cloud metadata endpoints.
  • Over-broad scopes: asking for every permission at once makes a stolen token far more damaging.

Two further cautions come from Anthropic's tool docs: a tool's results can contain instructions that Claude may follow (prompt injection), and selection accuracy drops once a model has more than about 30 to 50 tools loaded, which is why many-server setups use tool search. Install servers only from publishers you trust and give each one the least access it needs.

Frequently asked questions

What is MCP in Claude? MCP (Model Context Protocol) is the open standard Claude uses to connect to outside tools and data: Claude's connectors, Claude Code's MCP servers and the Claude API's MCP connector all speak it.

Who created the Model Context Protocol? Anthropic created the Model Context Protocol and released it on Nov 25, 2024; David Soria Parra and Justin Spahr-Summers built it, and since Dec 9, 2025 it belongs to the Linux Foundation's Agentic AI Foundation.

Does ChatGPT support MCP like Claude does? Yes. OpenAI said in Nov 2025 that MCP is integrated across ChatGPT and its developer platform, so the same MCP server can work with both Claude and ChatGPT. Learn more: ChatGPT on ai.vi.ki.

What is the difference between an MCP server and an MCP client? An MCP server offers tools, data or prompts (for example a GitHub or database server), while an MCP client is the connection an AI app such as Claude opens to one server.

Is MCP free to use? Yes. The Model Context Protocol specification and SDKs are open source under Apache 2.0, though the services an MCP server connects to may charge for their own use.

Sources

Moments

Why we built-and donated-the Model Context Protocol (MCP)

Anthropic

  1. The Model Context Protocol (MCP) is an open standard for connecting AI applications to the systems where data and…
  2. MCP's own documentation likens it to a USB-C port for AI applications: one plug shape instead of a different cable for…
  3. At launch, Anthropic named Block and Apollo as adopters and shipped servers for Google Drive, Slack, GitHub, Git…
  4. The Agentic AI Foundation (AAIF) was co-founded by Anthropic, Block and OpenAI, with support from Google, Microsoft…
  5. MCP Apps is an official extension that lets a server send an interactive interface (a chart, a form, a dashboard) that…
  6. MCP moves risk rather than removing it: an MCP server can read data and take actions with whatever access you give it…

See also

About this page

Last updated Nov 6, 2026 by the Vi.ki team. Page text CC BY-SA 4.0.

Edit History

Hotkeys

/
Jump to the search box
? or Ctrl + /
Open this list
Esc
Close this list, the photo viewer, or the account menu

Video

Space or K
Play or pause
← →
Back or forward 5 seconds
J L
Back or forward 10 seconds
0 to 9
Go to 0% to 90% of the video
, .
Previous or next frame, while paused
M
Mute or unmute
C
Captions on or off
F
Full screen on or off
A D
Previous or next moment

Photo viewer

← → or A D
Previous or next photo
↑ ↓ or W S
Previous or next photo
Home End
First or last photo
I
Show or hide the photo's info
Z
Clickless on or off: a pointer over a thumbnail shows it
N
Compare with the last photo: back to the one shown before this, and N again comes back
Q
Move the thumbnails to the next edge: top, bottom, left and round
, or Ctrl + ,
Open or close the viewer's settings
V
Clickless pan: a zoomed photo follows the pointer, rather than being dragged
Shift
Browse on or off
B
Show or hide the button bar
T
Show or hide the thumbnails
1
100% zoom on or off
0
Rate the photo as no opinion; again takes the answer back
+ -
Rate the photo a step higher or lower
F
Full screen: the photo alone. F again puts everything back.
Back to top