Hacker News new | ask | show | jobs
by sanderjd 440 days ago
Yeah it strikes me that if you want to provide MCP tools as a hosted service, the way to do that is to put them behind a web API.

I'm a little surprised there is so much hype for MCP rather than just "put your tools behind a web service with good machine-readable documentation, and agents can use them easily".
2 comments
hinkley 440 days ago
Doesn’t “behind an api” still have Bobby Tables problems?

How do I put it behind an API without dumbing it down to inutility?

link
sanderjd 440 days ago
On the "bobby tables" thing, my point is basically that all the same rules for API services still applies. You still have to sanitize sql and all the other stuff we've already been doing for decades.

> How do I put it behind an API without dumbing it down to inutility?

I dunno, I'm still feeling this out and just asking honest questions. But so far, most of the MCP functions I've seen have struck me as "this could be done behind an auto-generated RPC service running in a sandboxed environment".

link
lsaferite 440 days ago
MCP currently has two transports, one of which *is* a web accessible API.
link