Wrap-up

Recap

  • MCP turns N×M custom integrations into N+M: build a server once, use it everywhere.
  • A host runs one client per server. Every message goes through the host, which keeps the user in control.
  • Tools are controlled by the model, resources by the app, and prompts by the user.
  • stdio for local servers, Streamable HTTP with OAuth 2.1 for remote ones.
  • Claude sees names, descriptions and schemas, never code. Put rules in types and keep results small.
  • In Claude Code: claude mcp add at the right scope, then /mcp, @ resources and / prompts.
  • Treat tool descriptions and results as untrusted. Use least privilege and human approval.

Go deeper

Up next on Pirate Slides

AuthN vs AuthZ

Authentication Methods

28 / 28