Live data from Hacker News

Ask HN: Who is using MCP in production?

news.ycombinator.com

201–210 of 217 posts

Re: Ask HN: Who is using MCP in production?

#202

Interestingly most people in the comments talk about implementing an MCP server, while few talk about implementing an MCP client (as in actually using MCP for a specific purpose)

I can give you two examples:

In my company I use it to manage multiple Microsoft 365 clients. I control the server and keys for clients and manage azure roles, each of my technicians get permissions based on their azure role in my tenant.

In another company I work with, they use it to manage multiple tenants in a construction software platform.

Practical example: I can now ask Claude to grab the new user request that was emailed to me, and create the user and email the client back with details.

I think something people miss about "just using the API" is that managing keys and git repos is not something regular people do. The learning curve is too steep.

MCP SSO/OAuth and DCR means non-technical users can just paste in a URL and sign in, like they do with everything else.

Re: Ask HN: Who is using MCP in production?

#203

Earlier quoted context omitted.

Excuse me for being dense but I'd love to know more, if you can share. So you offer a voice agent for checking appointments and orders and stuff, is that through your app or website or something? So you make a button in your app which says "talk to our AI", and you've got the button set up so that it can send the customer's input query, along with a bit of text saying "our MCP is here, use it to answer the query", to…

We use a Twilio integration to make it work over a real phone line, but it could just as well be an app or websocket connection in a browser. Voice transport medium aside, the actual use case is not quite what you described. Companies like Eleven Labs and Vapi provide a full end to end voice agent platform. They handle the STT -> LLM -> TTS pipeline and infrastructure for voice agents. Think of a customer talking to…

cool, thanks :)

Re: Ask HN: Who is using MCP in production?

#207
post #8

many things once needed a MCP server now could be easily done via using CLI by agent

I’m curious, how do you handle authorization of the user without leaking tokens/api keys to model context without an MCP server (which supports OAuth, in principle)?

[flagged]

Re: Ask HN: Who is using MCP in production?

#208
post #64

Yes, quite a few uses in prod, main use case being abstracting API access for agents. In our case these are mostly in-house MCP servers, purpose built for the given agent. Why MCP instead of CLI or agent accessing API directly? Direct access (Curl/own small function): This requires agent to have full understanding of the API spec. Yes, context can be protected using progressive disclosure, but this essentially means…

[dead]

Re: Ask HN: Who is using MCP in production?

#209

Interestingly most people in the comments talk about implementing an MCP server, while few talk about implementing an MCP client (as in actually using MCP for a specific purpose)

I can give you two examples: In my company I use it to manage multiple Microsoft 365 clients. I control the server and keys for clients and manage azure roles, each of my technicians get permissions based on their azure role in my tenant. In another company I work with, they use it to manage multiple tenants in a construction software platform. Practical example: I can now ask Claude to grab the new user request that…

>Practical example: I can now ask Claude to grab the new user request that was emailed to me, and create the user and email the client back with details.

This sounds 100% absolutely horrible. If we had to reserve some small fraction of responsibilities that should not be delegated to an LLM, granting access control in a multi-tenant system has got to be up there in a top 5, along with controlling a nuke. If you are automating this, you hold nothing sacred.

I'm sure there's "more two it", but are you telling me with a straight face that you take an email sent by someone in your org requesting more access for themselves or an employee, then you copy and paste that in an LLM, and then take the output config files and feed it into your security system to grant them access?

> I think something people miss about "just using the API" is that managing keys and git repos is not something regular people do. The learning curve is too steep.

MCP SSO/OAuth and DCR means non-technical users can just paste in a URL and sign in, like they do with everything else.

Maybe that's cool? I can't imagine how that would apply to managing access control in a multi-tenant scenario, if a user cannot handle a secret string, then they shouldn't be managing access control in a multi-tenant platform.

The actually only sane part of this worflow is whatever is preventing you from completely automating this. There's some ticket system that requires some kind of manual intervention to mark as solved. The moment you start using an RPA system (like what OAI is releasing with v6), to mark tickets as closed, and these requests are fulfilled without human intervention, you have officially gone off the deep end.

I patiently and diligently await the day of reckoning

Re: Ask HN: Who is using MCP in production?

#210

Earlier quoted context omitted.

I can give you two examples: In my company I use it to manage multiple Microsoft 365 clients. I control the server and keys for clients and manage azure roles, each of my technicians get permissions based on their azure role in my tenant. In another company I work with, they use it to manage multiple tenants in a construction software platform. Practical example: I can now ask Claude to grab the new user request that…

>Practical example: I can now ask Claude to grab the new user request that was emailed to me, and create the user and email the client back with details. This sounds 100% absolutely horrible. If we had to reserve some small fraction of responsibilities that should not be delegated to an LLM, granting access control in a multi-tenant system has got to be up there in a top 5, along with controlling a nuke. If you are a…

No,I'm saying I use an LLM client to do what I would usually do with a mouse and keyboard. You're confusing tools with permission and process.

I also use it to mark tickets as closed, and create new tickets from recordings of support calls.

None of this means the LLM does it while I'm off doing something else, or without me initiating it

I work with several small businesses, not a multi department large corporate.

Post reply on HN