logoalt Hacker News

bastawhizyesterday at 12:22 PM1 replyview on HN

Sure, it needs a REST API. And you need docs for the API. Not just per endpoint but how to accomplish tasks with the API in the context of the application it supports.

But you don't want to just give any old agent raw curl access, so now you've got to provide a special client that can call just the APIs /endpoints that they're supposed to be able to. And it needs to know what the agent shouldn't be able to do as well. And it also needs to be able to handle things like auth, because you don't want the average person (or the agent!) handling bearer tokens. And you probably want a layer in between that validates everything against an OAS so the agent can't make invalid requests.

And now you've effectively just reinvented the good parts of MCP with extra tokens.


Replies

_heimdallyesterday at 12:58 PM

You're starting too recent though. MCP is attempting to recreate the good parts of REST APIs circa 25 years ago.

Soap was a pain and a lot of people didn't like XML, but they solved exactly these problems.

With MCP we're effectively trying to bolt those features onto a platform that fundamentally doesn't support it. Where as with XML/XSLT we could have a single XML endpoint + XSLT templates for converting that into HTML for browsers. Instead we now have modern web frameworks building RPC calls right into the bundle/build step, splitting state and rendering across both client and server, and have to stand up a new API context for agents that needs documentation and maintenance to keep parity with new features.

show 1 reply