If you have ever copy-pasted the same spreadsheet, ticket or document into three different AI chats, you already understand the problem the Model Context Protocol (MCP) was built to solve. MCP is an open standard for connecting AI applications to the places your information actually lives — files, databases, calendars, support tools and internal systems — so the assistant can read what it needs and, where you allow it, take action. Interest has risen again in recent weeks: on 15 September 2026 Google told Workspace admins that Gemini can now interact with Asana, HubSpot, QuickBooks, Salesforce and other business tools through MCP integrations, and the protocol’s own documentation now lists Claude, ChatGPT, Visual Studio Code and Cursor among the clients that support it. This guide explains how MCP works in plain English, then gives you three starter setups you can copy.
What is MCP, in plain English?
MCP is a shared plug shape for AI. The official MCP documentation describes it as “an open-source standard for connecting AI applications to external systems” and compares it to a USB-C port: one standard connection instead of a different custom cable for every tool. Anthropic, which introduced MCP as an open-source standard, built it because even capable models were “constrained by their isolation from data — trapped behind information silos and legacy systems,” with every new data source needing its own custom implementation. MCP replaces that tangle with a single protocol: a tool exposes its data once, in a standard way, and any compatible AI application can use it. Because the standard is open, the same connector can work across assistants instead of being rebuilt for each one.
How does MCP fit together? Hosts, clients and servers
Three roles do all the work. The host is the AI application you talk to — for example a desktop assistant or a code editor. Inside the host, a client manages the connection to one server at a time. The server is the small program that sits in front of a tool or dataset and offers it to the AI in a standard format. When Anthropic launched MCP it shipped pre-built servers for systems such as Google Drive, Slack, GitHub, Git, Postgres and Puppeteer, and developers can build their own with the published specification and SDKs. In practice you rarely think about the client at all: you install or enable a server, approve what it may access, and the assistant starts calling it like any other tool.
| Part | What it is | Everyday example |
|---|---|---|
| Host | The AI app you chat with | Claude, ChatGPT, Gemini in Workspace, Cursor |
| Client | The connector inside the host | The piece that opens and manages each server connection |
| Server | A bridge in front of one tool or dataset | A GitHub server, a Postgres server, a QuickBooks connector |
| Tools / resources / prompts | What a server offers: actions it can run, data it can read, templates it can supply | “List open tickets”, “read this file”, a saved report prompt |
Why is MCP trending again in October 2026?
Because the biggest platforms are now shipping it to ordinary users, not just developers. Google’s 15 September 2026 Workspace update says users can “directly interact” with Asana, Atlassian Rovo, HubSpot, Intuit Mailchimp, Intuit QuickBooks, Monday and Salesforce through MCP integrations, from the Gemini side panel in Docs, Sheets and Slides and in Google Chat. Crucially for teams, the feature is on by default for accounts with Gemini for Google Workspace access, and admins manage which connectors are allowed under Apps > Google Workspace Marketplace apps > Apps list (Google corrected that admin path on 30 September 2026). OpenAI’s Agents SDK documentation likewise treats MCP as a standard way to expose tools to agents, including hosted remote servers, Streamable HTTP servers and local stdio servers. When the three largest assistant vendors all speak the same protocol, connecting your tools stops being an experiment and becomes the default option to evaluate.
How do you set up your first MCP connection?
Start read-only, with one tool you already use every day. The safest first connection is a server that can look things up but cannot change or delete anything. Work through these steps:
- Pick the job, not the tool. Choose one repetitive question you ask weekly — “what changed in this project?”, “which invoices are overdue?” — and find the server for the system that holds that answer.
- Check the client you already have. If your assistant or editor already supports MCP, you usually only add the server; you do not install a new AI app.
- Connect with the smallest permission that works. Approve read-only access first. If the connector asks for write access you do not need, stop and look for a narrower option.
- Ask a question with a known answer. Test with something you can verify in ten seconds in the original tool. If the assistant’s answer matches, the plumbing works.
- Only then add a second server. One working connection you trust beats five you have never checked.
Three starter MCP setups worth copying
These three cover most first-week wins: files, tickets and money. Each follows the same pattern — one server, one question, one check.
1. Files and documents (start here)
Connect a documents server so the assistant can search your own files instead of working from whatever you remembered to paste. A good first prompt is: “Summarise the three most recent documents about [project] and list every date they mention.” Then open one document and confirm the dates. This is also the setup our Google AI Mode monitoring guide readers ask about most, because monitoring notes usually live in Docs and Sheets.
2. Tickets and project work
Connect your project tool — the class of integration Google just switched on for Gemini in Workspace with tools such as Asana and Monday — and ask: “List tickets assigned to me that changed this week, grouped by project, with blockers first.” Keep it read-only until the summaries prove accurate for a week. Only then consider letting the assistant draft status updates for your approval.
3. Business data you check by hand
Connect one business system — accounting or CRM are the usual candidates (QuickBooks and HubSpot appear in Google’s September connector list) — and ask a question with a number you already know: “How many invoices over 30 days are open, and what is the total?” Compare the total against the app itself. If they disagree, the connector’s filters — currency, date range, test data — are the first place to look, not the model.
What can go wrong with MCP? (and how to stay safe)
An MCP server acts with your permissions, so treat every connection like handing over a set of keys. OpenAI’s Agents SDK documentation is blunt about this: connect only to servers you trust, use least-privilege credentials, keep tokens in authorization headers rather than URLs, and require approval for sensitive operations. Apply the same rules everywhere:
- Install servers only from sources you can name — the tool vendor, the protocol’s official repositories, or your own IT team.
- Prefer read-only and scoped access. A server that can read one project should not be able to see your whole drive.
- Keep a human approval step for anything that sends, pays, deletes or publishes. Our AI agent permissions guide walks through a 30-minute audit you can reuse here.
- Re-check connections monthly. Remove servers you no longer use; every live connector is standing access to your data.
One more honesty note: this guide is desk-researched from vendor and protocol documentation, not a hands-on lab test of each connector. Behaviour differs between clients, and admin policies can change what end users see — which is why every setup above starts with a question whose answer you can verify yourself.
Should you build your own MCP server?
Only when the tool you need has no server and the same question keeps coming back. If a vendor or community server exists, use it; building your own means owning authentication, updates and security reviews. If you do build, Anthropic’s launch post points developers to the specification, SDKs and open-source server repository as the starting point, and frameworks such as OpenAI’s Agents SDK can consume the result. A sensible first build is narrow: one dataset, read-only, three or four well-named tools. If the assistant picks the wrong tool in testing, the fix is usually clearer tool names and descriptions — not a bigger model. For context on how quickly assistant capabilities are changing around standards like this, see our ChatGPT text watermark guide.
Frequently asked questions
Is MCP free to use?
MCP is an open-source standard, so the protocol itself is free. What you pay for is the assistant plan (for example a Gemini for Google Workspace licence) and any paid tool you connect. Some servers are free and open-source; vendor connectors may require specific plans.
Does MCP work with ChatGPT, Claude and Gemini?
Yes, in different forms. The MCP documentation lists Claude and ChatGPT among supporting AI assistants, OpenAI documents MCP support in its Agents SDK, and Google enabled MCP-based connectors for Gemini in Workspace in September 2026. The exact setup steps differ by product, so check your plan’s connector settings.
What is the difference between an MCP server and an API?
An API is how software talks to one specific service. An MCP server sits in front of that API and presents its data and actions to AI applications in one standard format, so the same server can be reused by many assistants instead of each assistant needing a custom integration.
Is it safe to connect MCP to my accounts?
It is as safe as the permissions you grant. Use servers from named sources, start read-only, scope access narrowly, keep approvals on for sensitive actions, and remove connectors you stop using. Never paste tokens or passwords into a chat to “set up” a connection.
Sources and methodology
This explainer rests on primary documentation checked on 7 October 2026: the official MCP introduction, Anthropic’s MCP launch announcement, OpenAI’s Agents SDK MCP documentation, and Google’s 15 September 2026 Workspace update on Gemini MCP connectors (admin path corrected 30 September 2026). Vendor statements are reported as vendor statements; connector behaviour was not independently lab-tested for this article, and availability can vary by plan and admin settings.
Arva Rangwala covers AI news, AI tools, guides and prompts for OpenAIMaster — what is new, what is worth using, and how to put AI to work.
Feel free to email us at contact@openaimaster.ai — we are happy to help!


