TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Ask HN: Is MCP mature enough to use safely?

6 点作者 Rooster61大约 1 个月前
After doing a bit of research and trying to get my head around MCP, I am eager to take advantage of the idea. However, I am skeptical of how usable the approach is as of yet, mainly due to its nascent nature.<p>My (admittedly oversimplified) understanding is that MCP&#x27;s purpose is mainly to provide a sort of langua franca for LLM&#x27;s to tackle agentic tasks without having to write unicorn handlers for every single service in every single language in every single individual API flavor. That sounds great, but my understanding is also that it is incumbent on the provider of that MCP server&#x27;s datasource&#x2F;resource to create and maintain the MCP server so that LLM&#x27;s can take advantage of them. A quick look across the interwebs shows that while there are a TON of MCP severs popping up from IC&#x27;s, a fraction of them are actually endorsed, much less directly maintained, by the entities that own&#x2F;run the services an LLM might want to interact with.<p>This of course presents an issue. Anyone with a greater understanding of software development beyond a junior level should understand that pulling libraries straight out of npm&#x2F;githublab&#x2F;whathaveyou carries with it security and privacy risks (yes, even if it&#x27;s open source, nasty bits can be hidden in one of those 100&#x27;s of libraries you are shotgunning into your app).<p>Am I missing something here? It all seems very wild west at the moment with a tremendous amount of hype, and I&#x27;d like to not be so skeptical. If it is as I say, how long until the foundation solidifies a bit and we truly do have a solid, mature MCP set to draw from?

2 条评论

muzani大约 1 个月前
Nope. None of it is. The experimental nature is part of the fun and part of the flex. I think there&#x27;s little incentive to keep it very stable or safe.<p>In general, experimental technology tends to take 3 or so years to solidify. But AI is different... models from 6 months ago are already deprecated. Not a lot has ever solidified in this space.
评论 #43612197 未加载
rglover大约 1 个月前
IMO, it&#x27;s wiser to focus on RAG (Retrieval Augmented Generation) and utilizing vector db&#x27;s as MCP is essentially an abstraction on top of that idea.<p>In essence, MCP is the next esoteric acronym that can be hyped&#x2F;used to get attention.