Pitfalls

Family-Level Support Claims

MCPMCPUSB-C for AI — one standard plug so any agent can connect to any data source or tool.The Model Context Protocol: an open standard (Anthropic, 2024) for connecting AI systems to external tools and data without building a custom integration for each one.Full definitionClose primitives and authentication differ by surface. Name the client and verify the exact contract.

Overprivileged Credentials

The server can act with whatever its identity permits, regardless of the model's stated intent. Use least privilege and separate environments.

Tool Descriptions as Authorization

Descriptions guide model choice; they do not enforce who may act or which records may be touched.

Prompt Injection in Results

External content can contain instructions aimed at the model. Separate data from control, sanitize presentation, and constrain subsequent tools.

Unbounded Responses

Large outputs consume context and obscure relevant facts. Paginate, summarize deterministically, and return references for drill-down.

Non-Idempotent Retries

Timeout recovery can repeat external writes. Use idempotency keys and return durable operation identifiers.

Falsification Checklist

• Are required primitives supported on this exact surface?
• What authority does the server identity actually have?
• Can untrusted output influence a more powerful tool?
• Are writes idempotent and independently logged?
• Does the hosted environment use the same network and authentication path as local testing?