mlsanityData to 13 Oct 2026

Bridging Protocol and Production: Design Patterns for Deploying AI Agents with Model Context Protocol

arXiv 2603.13417 ↗First posted 12 Mar 2026cs.SE cs.AI cs.MAcited by 2

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

The Model Context Protocol (MCP) standardizes how AI agents discover and invoke external tools, with over 10,000 active servers and 97 million monthly SDK downloads as of early 2026. Yet MCP does not yet standardize how agents safely operate those tools at production scale. Three protocol-level primitives remain missing: identity propagation, adaptive tool budgeting, and structured error semantics. This paper identifies these gaps through field lessons from an enterprise deployment of an AI agent platform integrated with a major cloud provider's MCP servers (client name redacted). We propose three mechanisms to fill them: (1) the Context-Aware Broker Protocol (CABP), which extends JSON-RPC with identity-scoped request routing via a six-stage broker pipeline; (2) Adaptive Timeout Budget Allocation (ATBA), which frames sequential tool invocation as a budget allocation problem over heterogeneous latency distributions; and (3) the Structured Error Recovery Framework (SERF), which provides machine-readable failure semantics that enable deterministic agent self-correction. We organize production failure modes into five design dimensions (server contracts, user context, timeouts, errors, and observability), document concrete failure vignettes, and present a production readiness checklist. All three algorithms are formalized as testable hypotheses with reproducible experimental methodology. Field observations demonstrate that while MCP provides a solid protocol foundation, reliable agent tool integration requires infrastructure-level mechanisms that the specification does not yet address.

Key facts. Cited by 2 papers in the map (data through 13 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 3 of its 52 references that are in the map. First posted on arXiv 12 Mar 2026.

Builds on

3 of 52 references.

Closest ancestors · 1

Same direction, newest first

  1. 2025MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers19 Aug

Other references · 2

  1. 2025Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directionscited by 263
  2. 2025A Practical Guide for Designing, Developing, and Deploying Production-Grade Agentic AI Workflowscited by 15

Built on by

Cited by year (2026 to 13 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025MCPZoo: A Large-Scale Dataset of Runnable Model Context Protocol Servers for AI Agent
  2. 2026Don't believe everything you read: Understanding and Measuring MCP Behavior under Misleading Tool Descriptions
  3. 2026Specifying AI-SDLC Processes: A Protocol Language for Human-Agent Boundaries
  4. 2026Model Context Protocol (MCP) Tool Descriptions Are Smelly! Towards Improving AI Agent Efficiency with Augmented MCP Tool Descriptions
  5. 2025LiveMCP-101: Stress Testing and Diagnosing MCP-enabled Agents on Challenging Queries
  6. 2026AI-NativeBench: An Open-Source White-Box Agentic Benchmark Suite for AI-Native Systems
  7. 2026When Tool Calls Succeed but Workflows Fail: Anomalies at the Agent-Tool Boundary
  8. 2025From REST to MCP: An Empirical Study of API Wrapping and Automated Server Generation for LLM Agents