Learn · MCP

What is MCP?

Short answer. MCP, the Model Context Protocol, is an open standard that lets AI applications such as Claude connect to external tools and data through "MCP servers". It standardises how an AI discovers and calls capabilities; it does not by itself decide what the AI should be allowed to do.

Last reviewed 24 September 2026

The short version

Before MCP, every AI application needed its own custom integration for every tool. MCP gives them a common language. An MCP client (inside an AI application) connects to an MCP server, which advertises tools, resources and prompts the AI can use.

What an MCP server provides

  • Tools — actions the AI can call, such as “search files” or “create draft”.
  • Resources — data the AI can read.
  • Prompts — reusable instructions.

What MCP does not decide

MCP describes how an AI calls a capability. It does not, on its own, decide whether a particular person’s AI should be allowed to call it, on which data, with what approval — or keep a record across all your AI tools. Those are organisational questions.

Where Kroy fits

Kroy exposes an MCP endpoint to AI clients and sits in front of your business systems. Each call is checked against the person, the agent, the delegation and your policies before anything happens.

MCP, drawn

Where MCP sits — and what it doesn’t decide.

  1. An AI application.

    Claude, ChatGPT or another app includes an MCP client.

  2. It connects to an MCP server.

    The server advertises tools, resources and prompts the AI can use.

  3. The server reaches a system.

    Behind the server is the real system: a mailbox, a database, an accounting ledger.

  4. But who is allowed?

    MCP standardises how the call is made. It does not decide whether this person’s AI may make it. Kroy sits here and does.

AI app MCP client
MCP
Kroy
MCP server
System
  • Person · agent · delegation
  • !Policy · approval
AI app MCP client
MCP
Kroy
MCP server
System
  • Person · agent · delegation
  • !Policy · approval
An AI client connecting through MCP to a server and a system, with Kroy deciding. An AI application.. It connects to an MCP server.. The server reaches a system.. But who is allowed?.