Skip to module content
Module 05 ยท ~8 min

MCP: The Integration Layer

State of the protocol, and the read-vs-write dividing line.

Reading progress
0/8 ยท 0%

The big idea

๐Ÿ’กKey idea
MCP (Model Context Protocol) is the universal plug standard for connecting AI agents to real tools and data sources. It went from an Anthropic side project (Nov 2024) to a cross-vendor standard by Q2 2026 โ€” 1,000+ listed servers, tens of millions of monthly downloads. The 2026 inflection point was enterprise vendors shipping **official** MCP servers: HubSpot (read + write, generally available), Salesforce/Agentforce, Clay, Apollo (Feb 2026, OAuth, free for paid customers), Amplemarket (Mar 2026), Google Ads, Meta Ads, GA4, BigQuery. The real dividing line is **read vs write**. Most early servers were read-only โ€” useful for dashboards, pointless for automation. The 2026 generation increasingly does both. When evaluating any server, the first question isn't 'does it exist?' โ€” it's 'what exactly can it write?'
Quick check
1 question ยท instant feedback
0/1
  1. The real dividing line for MCP servers in 2026 is:

Numbers that matter

1,000+
Production MCP servers listed on Smithery/Glama/PulseMCP.
25 vs 1,000
Per-call result caps: ZoomInfo vs Explorium โ€” an architecture decision, not a footnote.
7
Evaluation criteria to score every server in every client audit.
Quick check
1 question ยท instant feedback
0/1
  1. Naive summing of conversions across Google + Meta MCPs will:

Deep dive

4/4 open

Score every MCP server against these seven before installing it on a client engagement:

**1. Coverage** โ€” which platforms, objects, and fields does it actually reach? 'Google Ads' is not specific enough.

**2. Read vs read/write** โ€” can the agent act, or only look? Which specific write actions are available?

**3. Auth model** โ€” OAuth 2.1 with PKCE is the gold standard (client-manageable, rotatable, revocable). API keys embedded in URLs are fragile. Developer tokens create setup burden.

**4. Pricing transparency** โ€” is pricing published, or 'talk to sales'? Credit-metered servers (like Clay, ~20โ€“100 credits per action) need budget guardrails built into the workflow.

**5. Raw vs opinionated** โ€” does it return platform data as-is, or does it apply attribution correction? Know which you're getting before you report numbers.

**6. Scale mechanics** โ€” per-call result caps matter enormously. ZoomInfo returns 25 results per call; Explorium returns up to 1,000. A 1,000-prospect enrichment job on ZoomInfo requires 40 looping calls that eat context and slow the agent. That's an architecture decision, not a footnote.

**7. Maintenance & docs** โ€” is the repo actively maintained? Does it have real users? Dead repos become liabilities mid-engagement.

Every ad-platform MCP surfaces self-attributed conversions โ€” meaning Google credits itself for every conversion on a path where a Google ad appeared, and Meta does the same. A naive agent summing across both platforms will double-count and systematically flatter whichever platform touches more customer journeys.

Deliver this three-level fix in every client meeting where cross-platform data appears:

**(a) Always report per-platform** with an explicit caveat that numbers overlap.

**(b) Anchor to GA4 or CRM outcomes** as the tiebreaker โ€” these are single-source and not self-reported.

**(c) For larger clients, use a measurement-layer server** โ€” cross-channel attribution tools like SegmentStream, or a BigQuery MCP over a modeled attribution table.

Delivering this analysis builds more trust than any dashboard. Most competitors don't mention it.

The mature MCP stack posture has four components:

**Official servers where they exist** โ€” HubSpot, Salesforce, Google Ads, Meta Ads, Apollo, GA4, BigQuery. These are maintained by the vendor and don't require you to write API wrappers.

**Custom servers where they don't** โ€” any tool without an official server can get one. Writing a simple MCP wrapper is a 1โ€“2 day job for a developer, and it becomes a reusable agency asset.

**Gateway consolidation** โ€” one endpoint that proxies all your servers, unifying credentials and audit logs (covered in the next module).

**Safety-guarded write paths** โ€” write operations go through a hook or approval gate; they don't fire on model intent alone.

That combination is the 2026 reference architecture. Most 'AI-native' agencies are still at read-only dashboards, which puts them at Level 2 on the ladder. Document your stack as IP.

Per-call result caps are one of the most underappreciated architecture variables in MCP selection.

Imagine a 1,000-prospect enrichment job: - On **ZoomInfo** (25 results/call): 40 API calls, each one adding results to the context window. The agent loops, context grows, and the job slows โ€” or hits the context limit entirely. - On **Explorium** (up to 1,000 entities/call): the same job completes in a single call that stays entirely outside the main context window.

This isn't a cost footnote. It's the difference between a workflow that scales and one that breaks at 500 rows. Evaluate per-call caps before you commit to a server for high-volume work.

Quick check
1 question ยท instant feedback
0/1
  1. Preferred auth model for client-managed servers is:

How to run it

  1. Score each server across all 7 criteria
    Especially: what exactly can it write?
  2. Prefer OAuth 2.1/PKCE
    Client-manageable, rotatable, revocable.
  3. Deliver the attribution caveat
    In every client meeting where ad-platform data appears.
  4. Watch per-call caps
    Server-side batching keeps enrichment out of the context window.
Quick check
1 question ยท instant feedback
0/1
  1. Explorium's 1,000-entities-per-call vs ZoomInfo's 25 matters because:

In the field

๐Ÿ”ฌWorked example
Attribution warning to deliver in every client meeting: 'Each ad platform credits itself for conversions on paths it touched. We always report per-platform with the caveat, anchor to GA4 or CRM-sourced outcomes as tiebreaker, and for bigger clients use a measurement-layer server (SegmentStream-style cross-channel attribution or BigQuery over a modeled table).' That paragraph is worth more trust than most dashboards.
๐ŸšซWhen not to reach for it
Don't sum 'conversions' across ad-platform MCPs โ€” each platform self-attributes wherever its ads touched the path. Naive summing double-counts and flatters whichever platform touches more journeys.
Quick check
1 question ยท instant feedback
0/1
  1. The reference stack posture in 2026 is:

Pitfalls & takeaways

Failure modes

  • Read-only dashboards sold as 'AI-native' โ€” you're still at level 2.
  • Cross-platform conversion sums with no attribution caveat.
  • API-keys-in-URLs auth models on client work.
  • Ignoring per-call result caps (ZoomInfo's 25/call means a 1k-prospect job = 40 loops eating context).

Durable takeaways

  • Read-vs-write is the real dividing line.
  • Never sum ad-platform self-attributed conversions.
  • Per-call result caps are an architecture decision.
  • Official + custom + gateway + guarded write is the 2026 reference architecture.

Do the work

๐Ÿ‹๏ธProve you learned it

Score three MCP servers in your stack across the 7 criteria (coverage, read-vs-write, auth model, pricing transparency, raw vs opinionated, scale mechanics, maintenance). Rank them and identify one server you'd swap.

0 chars
๐Ÿ“ฆArtifact to produce
Per-server evaluation card following the 7-criterion rubric.

Sources

  • ยท GMS Field Manual ยง5 (MCP: The Integration Layer)
  • ยท BlueAlpha + Amplemarket + agency-stack review rubrics