Model Context Protocol turns your internal services into something an agent can call without bespoke glue. What MCP actually is, what it costs to expose one well, and the patterns that hold up when the caller is an LLM instead of a UI.
Your contact form takes a name, an email, and a message. Three fields. Two of them can take over your mail server if you let them. A short tour of an attack that's older than I am, and how I found it in code I'd just shipped.