What MCP standardises and what the host must still do: a responsibilities map for hosts, clients and servers
Host, client and server carry different obligations in MCP, and the 2026-07-28 documentation is explicit about where the protocol stops: message formats, discovery and transports are standardised, while consent, context assembly and actual security enforcement stay with the host application.






