The single biggest cost in deploying AI automation has not been the intelligence of the model, it has been wiring that model to each business tool it needs. Two open protocols now standardize that wiring. Anthropic's Model Context Protocol (MCP) gives any AI agent a universal interface to read data and call external tools, while Google's Agent-to-Agent (A2A) protocol lets separate agents discover each other and coordinate tasks. The practical result is that AI automation is shifting from bespoke engineering to a pluggable standard, and the integration cost that once gated every deployment is falling fast.
Before MCP, connecting a language model to a CRM, a calendar, or a database required custom integration code for every combination of model and tool. Anthropic described the situation as an N-by-M problem: N data sources times M AI applications, each needing its own connector. MCP replaces that with a single client-server standard built on JSON-RPC, so a tool vendor publishes one MCP server and every compliant agent, whether Claude, ChatGPT, or an open-source model, can use it immediately. Since its November 2024 launch, the protocol has crossed 97 million monthly SDK downloads across Python and TypeScript, with more than 10,000 published MCP servers in production use.
The clearest sign that MCP has become infrastructure rather than a single vendor's experiment is its governance trajectory. In March 2025, OpenAI adopted MCP across its products, including the ChatGPT desktop app. By December 2025, Anthropic donated the protocol to the newly formed Agentic AI Foundation (AAIF) under the Linux Foundation, co-founded with Block and OpenAI, and backed by Google, Microsoft, AWS, Cloudflare, and Bloomberg. For a business evaluating AI automation, this means the integration layer is an open standard with broad industry commitment, not a proprietary dependency that could disappear.
MCP solves the connection between a single agent and its tools, but many valuable automations require multiple agents to collaborate. Google's A2A protocol, introduced in April 2025 with contributions from over 50 technology partners including Salesforce and ServiceNow, addresses this second layer. Each agent publishes a machine-readable Agent Card describing its capabilities, inputs, and authentication requirements, so another agent can discover it, delegate a task, and track progress, whether the two agents run on the same platform or different ones. A peer-reviewed survey on arXiv mapped both protocols alongside IBM's Agent Communication Protocol and proposed a phased adoption roadmap: MCP first for tool access, then A2A for collaborative multi-agent execution.
Standardizing how agents call tools also standardizes the attack surface, and the security research has kept pace. A comparative threat analysis across MCP, A2A, and related protocols identified risks including tool poisoning, where a malicious server injects harmful instructions through its tool descriptions, and excessive agency, where an agent applies a legitimate tool in an unintended way. The OWASP Top 10 for LLM Applications (2025) ranks prompt injection as the number-one threat, with tool abuse as the primary attack vector. The practical implication for any production deployment is the same principle that governs reliable AI automation at scale: explicit human checkpoints on high-stakes actions and scoped permissions for every tool an agent can call.
For a business that is not building AI infrastructure from scratch, the takeaway is straightforward. An MCP-compatible agent can read from a CRM, update a project tracker, query an inventory database, send a calendar invite, and draft a response for human approval, all through standardized connections rather than custom code. That drops both the upfront cost and the ongoing maintenance of automation. The same standardization makes it practical to swap or upgrade the underlying model without rebuilding every integration, which is exactly the multi-model orchestration pattern that keeps AI automation resilient as the field evolves.
The integration bottleneck that made AI automation slow, expensive, and fragile is dissolving into open standards. Italian DesAIgns builds AI automation on MCP-compatible tool connections and multi-agent orchestration patterns, designing each system to plug into a client's existing tools through the same universal interfaces the rest of the industry is converging on. A quick AI visibility check shows how well a business's digital infrastructure, the structured data and machine-readable content, is prepared to work with an AI agent.
- Italian DesAIgns
References & Citations
- Anthropic: Introducing the Model Context Protocol.
- Anthropic: Donating the Model Context Protocol and Establishing the Agentic AI Foundation.
- arXiv: A Survey of Agent Interoperability Protocols: MCP, ACP, A2A, and ANP (2025).
- arXiv: Security Threat Modeling for Emerging AI-Agent Protocols (2025).
- OWASP: Top 10 for LLM Applications 2025.
- Linux Foundation: Formation of the Agentic AI Foundation.