On this page
MCP Servers & Governance
View this page on GitHub
Expanding on notes captured on the Glossary page
0️⃣ Links to Check Out
1️⃣ A2A (Agent-to-Agent) — The Intent Layer
- An MCP server exposes:
- tools (functions the client/LLM can call)
- resources (documents, URLs, databases)
- prompts (template suggestions)
- context extensions (metadata, workspace awareness)
2️⃣ Prediction Guard’s Agent “Chunks”
From screenshots captured in a webinar, here’s how Prediction Guard chunks up the components of an Agent (which may/do integrate to MCP servers)
System Prompt
Example: Hello! I'm your Go-to-Market specialist from FutureShield. How can I assist you today? Whether you need insights on our sales pipeline, upcoming contract renewals, or anything else to help drive growth, just let me know!
MCP Server & Tools
(Assume this would be specified… get the slides from the Prediction Guard guys)
Settings
- Temperature: a real number between 0 and 1 that controls how much randomness there is in the model’s responses (0 is most predictable/least variable [creative])
- Top P: Top-P (also called nucleus sampling) limits the model’s next-token choices to the smallest set of tokens whose cumulative probability adds up to P (e.g. 0.80)
- Top K: Top-K limits the model’s next-token choice to the K most probable tokens, then samples from only that fixed set
- Max Output Tokens: Maximum number of tokens the model can generate in a single response
Resources & Knowledge
- Additional Documents: assume for RAG purposes e.g. uploaded documents
Security & Safety
(What tools can be used to execute on these guardrails?)
- Prompt Injection Protection
- PII Detection & Replacement
Security considerations:
- High level MCP Governance:
- Leverage monitoring
- Employ:
- MCP server “allow” lists
- MCP server and tool “verified” lists
- MCP server “blacklists”
- Current standard is to use OAuth 2.1 authentication to authenticate your MCP client to MCP servers
- Apply prompt injection detection to MCP server results to safeguard against adversarial or malicious inputs
Other Notes & Ideas
- IDEA: build a RAG system and wrap in an MCP server so it can be integrated into Agents
View this page on GitHub