Murph's Take

Claude Code MCP Servers: The Extension Layer That Changes What's Possible

MCP servers aren't plugins — they're the architectural primitive that turns Claude Code from a capable assistant into the connective tissue of an entire operation.

Jason MurphyMarch 27, 20267 min read

I've been shipping with Claude Code for long enough now to stop being impressed by the surface and start paying attention to the structure underneath. And the structure underneath — specifically the Model Context Protocol server layer — is where the real conversation needs to happen. Not because MCP is new or shiny, but because most people building with it are still treating it like a plugin system when it's actually something closer to a nervous system.

Here's the frame I keep coming back to: Claude Code without MCP servers is a very intelligent agent operating in a room with no doors. It can reason, write, refactor, architect. But its world ends at the context window. MCP servers are the doors. More precisely, they're the decision about which doors exist, where they lead, and what Claude is allowed to do once it walks through them. That's not a tooling decision. That's an architectural one.

The Model Context Protocol itself is deceptively simple — a standardized way for Claude to call external tools, read from data sources, and take actions in connected systems. What makes it non-trivial is what you build on top of that simplicity. I've been running MCP servers that connect Claude Code to internal knowledge bases, project management state, client communication threads, and deployment pipelines. What I've observed is that the quality of Claude's reasoning doesn't just scale with the model — it scales with the coherence of the context you feed it. Gloria Mark's research on attention fragmentation is useful here: humans lose roughly 23 minutes of deep focus every time they switch contexts. Claude doesn't have that biological tax, but it has an architectural equivalent. When the information it needs is scattered, disconnected, or absent, you get answers that are locally correct and globally incoherent. MCP servers, designed well, solve the architectural version of that problem.

What I mean by "designed well" is specific. A naive MCP implementation hands Claude a pile of tools and hopes it figures out the right sequence. A designed one thinks about information flow before tool availability — what does Claude need to know before it can usefully act, and how do you make that knowledge reliably accessible without bloating the context with noise? This is where I see most teams get it wrong. They instrument everything and then wonder why Claude's outputs feel scattered. You don't want maximum connectivity. You want purposeful connectivity — tools and data sources that are scoped, named clearly, and sequenced to match how reasoning actually unfolds in a task.

The filesystem MCP server is the one people reach for first, and it's a reasonable starting point — Claude can read and write files, navigate directory structures, operate with real persistence. But the more interesting work happens when you start chaining domain-specific servers. I'm running a setup right now where Claude Code has access to a Notion MCP server for project state, a custom server that surfaces relevant conversation history from client threads, and a GitHub MCP server for code context. The result isn't that Claude has "more tools." The result is that Claude operates with something closer to the full operational picture a senior collaborator would have — without me having to manually reconstruct that picture every session. That's the shift. You're not giving Claude capabilities. You're giving Claude context architecture.

The security model matters here and I want to be direct about it because people gloss over this. MCP servers run as separate processes. They communicate with Claude Code over a defined protocol. That separation is intentional and important — it means you can scope exactly what each server can touch, audit what's being called and when, and isolate failure modes. When I'm building a server that has write access to anything consequential, I think carefully about what confirmation loops belong in the tool definitions versus what I want Claude to handle autonomously. This isn't paranoia. It's system design. The same way you'd think about permission scopes in any distributed architecture.

What I think is underappreciated about the MCP ecosystem right now is that it's still early enough that the servers you build are genuinely differentiated infrastructure. Anthropic publishes reference implementations. The community is producing more. But the servers that encode your operational logic — the ones that surface the right information in the right shape for the specific kind of work you do — those aren't available in any registry. They're built. And the building process is itself a forcing function for clarity: you cannot write a good MCP server for a domain you don't understand deeply, because you can't define the right tools, the right data shapes, or the right boundaries without that understanding.

The question I keep sitting with is this: if Claude Code is increasingly capable of operating autonomously across complex, multi-step tasks, and MCP servers are what determine what it can perceive and act on — then the real leverage isn't in prompting, and it isn't even in the model. It's in the design of the extension layer itself. Which means the most valuable skill in this ecosystem right now might not be knowing how to use Claude. It might be knowing how to architect what Claude can see.

Want this for your business?

Tell us what you're building. We'll map out exactly what to build and what it costs.

Start Your Project →

Frequently Asked

What is the Model Context Protocol and why does it matter?

MCP is a standardized protocol that allows Claude Code to call external tools, read from data sources, and take actions in connected systems. It matters because it converts Claude from an agent with a finite context window into an agent that can perceive and operate across your entire stack — files, databases, project management tools, communication threads, deployment pipelines. The protocol itself is simple; the leverage is in what you build on top of it.

What's the difference between a naive MCP implementation and a designed one?

A naive implementation connects Claude to as many tools as possible and hopes it figures out the right sequence. A designed one starts with information flow — what does Claude need to know before it can usefully act, and in what order? Designed MCP architectures define purposeful connectivity: tools that are scoped clearly, named descriptively, and sequenced to match how reasoning actually unfolds. Maximum connectivity is not the goal. Coherent context architecture is.

How should I think about the security model for MCP servers?

MCP servers run as separate processes and communicate with Claude Code over a defined protocol. That separation means you can scope exactly what each server can access, audit tool calls, and isolate failure modes. For any server with write access to consequential systems, think carefully about what confirmation loops belong in the tool definitions. This is standard distributed systems thinking — it's not specific to AI.

What types of MCP servers provide the most operational leverage?

Domain-specific servers that encode your operational logic — the ones that surface information in the shape your specific work requires. Filesystem, GitHub, and Notion servers are useful starting points, but the highest-leverage servers are custom-built: ones that understand your project state, surface relevant history from client communications, or connect Claude to internal knowledge bases. These can't be downloaded from a registry. They're built, and the building process forces clarity about your own operational structure.

Jason Murphy

Written by

Murph

Jason Matthew Murphy. Twenty years building digital systems for businesses. Former CardinalCommerce (acquired by Visa). Now running VibeTokens — AI-built websites and content for small businesses.

The window is open.

It won't be forever.

Start Your Project →