---
title: "Comment by Kartik N V J K on \"AI Is Getting a Body. Here's What That Means.\" | Hashnode"
description: "The \"read the guidebook the airline publishes\" analogy for MCP is the clearest framing of it I've come across. It captures that the agent isn't hardcoded agains"
url: "https://hashnode.com/posts/ai-is-getting-a-body-here-s-what-that-means/6a5f8edaaf4356122f7a7dd9/comment/6a6223032cbf85657edaf90e"
---

[Discussion](https://hashnode.com/posts/ai-is-getting-a-body-here-s-what-that-means/6a5f8edaaf4356122f7a7dd9)

Comment [AI Is Getting a Body. Here's What That Means.](https://hashnode.com/posts/ai-is-getting-a-body-here-s-what-that-means/6a5f8edaaf4356122f7a7dd9)

[Kartik N V J K](https://hashnode.com/@kartik-nvj)

[Jul 23](https://hashnode.com/posts/ai-is-getting-a-body-here-s-what-that-means/6a5f8edaaf4356122f7a7dd9/comment/6a6223032cbf85657edaf90e)

The "read the guidebook the airline publishes" analogy for MCP is the clearest framing of it I've come across. It captures that the agent isn't hardcoded against one API, it discovers capabilities a provider chose to expose, which is what makes the pattern scale across tools. Where do you see the boundary landing on what a provider should and shouldn't expose through it?

[Kavya Sree Kammari](https://hashnode.com/@CosmosAtom)

[Jul 23](https://hashnode.com/posts/ai-is-getting-a-body-here-s-what-that-means/6a5f8edaaf4356122f7a7dd9/comment/6a6223032cbf85657edaf90e#reply-6a622f418a697416a8cc0b12)

Great observation Kartik! The rule of thumb I'd use: expose actions, not infrastructure. A provider should publish what it can do (search flights, book, cancel, check status), not raw database access or internal system internals. The boundary is capability vs infrastructure.

And this is actually a real security conversation happening right now. If a provider exposes too much through an MCP, a poorly-scoped agent could read data it shouldn't, trigger unintended actions, or become an attack surface for prompt injection. Production teams are genuinely cautious about this — which is part of why adoption has been slower than the hype suggests.

There's also an interesting industry shift happening: until recently, there was a whole ecosystem of startups, consultants, and freelancers whose job was to build the custom product or infra layer for your specific AI usecase — designing how AI plugs into your business end to end. MCP is quietly threatening that. When the protocol is standardised and any AI can discover what your service does, that bespoke integration business gets a lot harder to justify.

Going deep on this in the MCP dedicated post later in the series.