Developers can either expose their data through MCP servers or build AI applications (MCP clients) that connect to those servers. Instead of maintaining separate connectors for each data source, Anthropic said, developers can now build against a standard protocol.
To help with adoption, Anthropic released pre-built MCP servers for Google Drive, Slack, GitHub, Git, Postgres and Puppeteer.
However, some experts have complained that, unless carefully created and configured, MCP servers can be vulnerable to prompt injection, tool poisoning, or tool shadowing (where a malicious server creates a tool with the same name as a legitimate tool from another server to intercept calls). Wang said MCP Server for Trelica has protections against attacks such as these. For example, she said, the client won’t expose sensitive data in responses to questions.