Home/Blog/What an MCP Server Is, and What It Is Not

What an MCP Server Is, and What It Is Not

An MCP server publishing a list of permitted actions, and an assistant choosing from it

An MCP server is software that publishes a list of actions an AI assistant is allowed to take in a system, and carries them out when asked. It is not a plugin, it is not a copy of your data, and having one is not the same as being able to change anything.

The term arrived through developer tooling, so most explanations are written for engineers. The decision in front of a business is different.

What it actually does

Three things, in order.

It publishes. The server describes what is available: list the open deals, create an action, read this quarter's progress. Each one has a name, a description and the information it needs.

It waits. Nothing happens on a schedule. The server does nothing at all until an assistant asks.

It acts, within permissions. When the assistant picks an action, the server carries it out as the person who connected it, which means it cannot reach anything that person could not already reach.

That third point is the one worth holding on to. A well built MCP server does not create a new door into your business. It creates a narrower one than the person already has.

What it is not

People assumeWhat is true
It gives the AI your dataIt gives the AI permission to ask, one action at a time
It is a syncNothing moves until somebody asks a question
It replaces integrationsIt sits beside them, and often on top of the same API
Having one means it can writeMany publish read actions only
It is a pluginA plugin extends an app. This lets an assistant use an app

The question that decides everything: can it write

"We have an MCP" has become a marketing line, and it is close to meaningless on its own. The useful question is which actions the server publishes and whether any of them change data.

A read-only server answers questions. That is genuinely useful: what is behind, what closed last month, which clients have not been contacted. It cannot do the work.

A writing server can update a record, create an action, move a deal. That is a different proposition, and it is where the time saving actually lives, because the alternative is a person retyping what the assistant just worked out.

Ask the vendor for the list of actions. If they cannot produce one, the answer to whether it writes is almost certainly no.

Why a business might want one

The honest version is narrow. An MCP server is worth having when the question you want answered is different every time.

A scheduled report is better as an integration: it has to happen on a Monday whether anyone is there or not. A nightly sync is better as a sync. But "which of my clients have slipped since the last review, and draft the note" is not a report. It is a different question each time it is asked, and writing an integration for it would mean guessing the question in advance.

That is the dividing line, and it is the only one that matters when deciding between the two.

What to check before connecting one

Four things, and they take ten minutes.

Whose permissions does it use. It should act as the person connecting it, not as an administrator.

What it publishes. Ask for the action list. Read it. If it is short and all reads, you are buying a question-answering tool.

Whether actions are logged. You want to be able to see what was done and by which assistant.

How to turn it off. Access you cannot withdraw in one place is access you do not control.

Where Empiraa sits

Empiraa GPS shipped its MCP in version 1.22. A compatible AI assistant connects to GPS within your permissions, which means it sees the plan, the owners and the progress that you can see, and nothing else. It is included on every Professional Services tier. Empiraa Signal's MCP is in build and not shipped at the time of writing, which is worth stating plainly, because the thing this post is about is vendors being vague on exactly that point.


Related reading: what an MCP actually is, written for a leader, and MCP or integration, which does your business need.

For the mechanism, see how MCP works in five steps, and for the comparison, MCP vs API.

Common questions

What is an MCP server?
A piece of software that sits in front of a system and publishes a list of actions an AI assistant is permitted to take there, then carries them out when asked. The assistant does not get a copy of your data and does not get free rein. It gets a menu, and the menu is the security model.
What is the difference between an MCP server and an API?
An API is a set of endpoints a developer writes code against. An MCP server is a description of what is available and what it does, written so that an assistant can read it and decide which action fits the question it has just been asked. Most MCP servers sit on top of an API rather than replacing it.
Do I need to run my own MCP server?
Usually not. If the software you want to connect publishes one, you connect to theirs. You would run your own only to expose something that has no MCP server yet, such as an internal database or a system a vendor has not covered, and that is a development project rather than a setting.
Can an MCP server write data, or only read it?
It depends entirely on the server, and this is the question to ask first. Many publish read actions only. Some publish writes. A vendor saying they have an MCP tells you nothing about which, so the useful question is never whether they have one but which actions it exposes and whether writing is among them.
Is an MCP server safe to connect to business data?
It is as safe as the permissions behind it, which is why the permission model matters more than the protocol. A well built one acts as the person who connected it and can do nothing that person could not do in the product. Before connecting anything, check whether actions are logged and whether access can be withdrawn in one place.
Ash Brown

Ash Brown

Founder & CEO of Empiraa

Published 8 November 2026

Put this quarter’s plan somewhere it cannot be ignored.

Empiraa GPS gives every commitment one named owner, measures that are read rather than chased, and a view of what is behind while there is still time to do something about it.

30 days free. No credit card.