Model Context Protocol (MCP) standardizes how an AI application connects to external capabilities. The host is the user-facing AI application. It creates a client for each server connection, manages user consent and model context, and enforces application policy. A server exposes a focused capability such as files, a database, source control, or a business API.
MCP messages use JSON-RPC semantics. A connection begins with initialization and capability negotiation so each side knows which protocol revision and features are supported. Requests have IDs and receive results or structured errors; notifications do not expect a response.
The protocol standardizes discovery and invocation, but it does not make a server trustworthy. Authentication, authorization, data minimization, sandboxing, and approval remain deployment responsibilities.