CourseAgentic AI Engineer: The Complete Course · Module 4: Model Context Protocol · part 25 of 97
Part 25 · Module 4: Model Context Protocol

Lesson 3: When an MCP server works against you

19 min read·13 Oct 2026
Module 4 · Lesson 3 · About 50 minutes · Needs: Lesson 2 (an MCP server and a client) and Module 3's tools

The situation

Week 5. BrightCart's tools now run behind its own MCP server. Request R-1005 has no good answer: Tom Becker asks "Where is my TV?", and the agent cannot see the courier's tracking. Priya finds ParcelTrack, a free third-party MCP server for parcel tracking, and asks you to connect it. Sam wants to read its tool definitions first.

R-1005 Where is my TV? Host + agent returns desk BrightCart your own server ParcelTrack third party, unread connect it in five minutes?
R-1005 needs tracking data, so Priya wants a second MCP server, written by someone else, beside BrightCart's own (blue is your system, amber is uncertain).

ParcelTrack is made up. The attacks are not: each follows a published pattern. You run each one against the returns desk, then the defence that stops it.

The rest of this course is yours to keep

This course is bought on its own, once, and stays readable afterwards, including the parts added to it later.