Thanks for the explanation; you’ve certainly put a lot of thought into this.
A couple of comments from my side:
- Everyone should always secure their DDP as much as possible (rate limiting, encryption, and avoiding method abuse).
- I’m still trying to fully grasp the use case for creating an MCP server for your app. Since your users can already use the app directly, why would they need an AI agent to do it for them? For something like creating a CS ticket, that can usually be handled within the app’s own logic.
Generally, an AI agent needs access to another server or app via an MCP server (or even a CLI, which is much more token-efficient) when that app belongs to a different ecosystem (like TrendRadar or MindsDb) or provides a necessary third-party service (like Context7).
Which specific AI agent or workflow is the target group for your MCP server?
In the world of agentic coding, integrating an app with Slack or a payment gateway (Stripe, PayPal, etc.) is often a relatively quick task for an AI agent. I handle my own automations using BullMQ, and it works perfectly for integrations with tools like PayPal, Buy Me a Coffee, and Chargebee.
Ultimately, I prefer to stay in full control of my DDP connections, or the absence of them for my airtight on-prem servers, to manage exactly what my methods do. I might place extra emphasis on this because my own SaaS handles sensitive DNA data. Ensuring that user data is 100% safe is my top priority; a single breach can be devastating for a company in that space.
Anyway, this is just my personal PoV based on my specific situation. I’m sure others see it differently, and you clearly have a different perspective. Please don’t take this as a personal attack or me trying to talk down your idea, it’s just not the right fit for my current stack.
What I really appreciate about your post is the “food for thought.” Exploring how AI agents can be helpful and pushing these boundaries is exactly what makes these discussions valuable. Thank you for taking the time to explain your thoughts so clearly.
Keep us posted!