I second that. MCP is more of a scaffolding concept than a solution itself. There is no safety in consulting an LLM on anything. What you're building is a RAG a

I second that. MCP is more of a scaffolding concept than a solution itself. There is no safety in consulting an LLM on anything. What you're building is a RAG app that must coordinate LLM calls and tool calls. Any safety built into that is going to built into your procedural code (in a programming language) and not coming from an LLM, which by itself cannot be "corralled." MCP is just a way of specifying which user prompts go with which LLM calls and tool calls and provides no safety (or even functionality) of its own.