A protocol, not a trust guarantee
MCP standardizes parts of the connection between an AI application and external capabilities. It does not decide whether a tool should be called, whether a result is true, or whether the caller is authorized to access particular data.
A possible graph adapter
A future adapter could expose approved graph lookups or source material as resources. That is an extension opportunity, not a feature implemented on this site. A public JSON export is not, by itself, an MCP server.
Keep tool permissions narrow, validate inputs, review server trust, and separate reading from mutation. Never let external content silently expand the assistant’s authority.