An MCP Tool is an executable function exposed by an MCP server, defined by a name, description, and an input JSON Schema, which a client can invoke to perform actions like calling an API, running a script, or modifying data. It is the fundamental mechanism within the Model Context Protocol for extending an AI agent's capabilities beyond its internal knowledge, allowing it to interact with and manipulate the external digital world through a standardized, schema-defined interface.
Glossary
MCP Tool

What is an MCP Tool?
A core executable component within the Model Context Protocol framework that enables AI agents to perform actions in external systems.
Each tool's definition acts as a contract, ensuring the MCP client (e.g., an AI assistant) provides correctly structured arguments. Upon invocation, the server executes the corresponding tool handler—the backend logic—and returns a structured result. This pattern decouples the AI's reasoning from implementation details, enabling secure, validated, and observable integration with databases, APIs, and other enterprise services through a unified protocol.
Core Components of an MCP Tool Definition
An MCP Tool is an executable function exposed by a server, defined by a formal specification that enables AI clients to perform external actions. Its definition is composed of several key, standardized components.
Name and Identifier
The name field is a unique, machine-readable string identifier for the tool within the server's namespace. It follows a reverse domain-like naming convention (e.g., github.search_issues) to ensure global uniqueness and avoid collisions when multiple servers are connected. This name is used by the client in the JSON-RPC tools/call request to specify which function to execute.
Description and Intent
The description is a human-readable, natural language explanation of the tool's purpose and behavior. It is critically consumed by the AI client's language model to understand when and how to use the tool. A well-written description includes:
- The tool's primary action (e.g., 'Searches for repositories').
- The expected outcome.
- Any important preconditions or side effects. This text directly influences the agent's reasoning and tool selection accuracy.
Input JSON Schema
The inputSchema is a JSON Schema object that rigorously defines the structure, types, and validation rules for the tool's arguments. This schema acts as a contract between the client and server, enabling:
- Structured Output Guarantees: The LLM is constrained to generate arguments that match the defined properties (e.g.,
queryof typestring). - Request/Response Validation: The server validates incoming requests against this schema before execution.
- Automatic Documentation: Clients can introspect the schema to understand required and optional parameters, their data types, and any constraints (like enums or pattern matching).
Tool Handler Implementation
The handler is the server-side function or method that contains the business logic executed when the tool is invoked. It is not part of the definition sent to the client but is its essential counterpart on the server. The handler:
- Receives the validated input arguments.
- Executes the intended action (e.g., calls a REST API, queries a database, runs a script).
- Returns a result (or error) that conforms to the MCP result specification.
- Manages authentication, error handling, and side effects securely within the server's execution environment.
Capability Advertisement
During the initial capability negotiation handshake, the MCP server advertises its available tools to the client via the tools list in the initialize result. Each entry in this list is the complete tool definition (name, description, inputSchema). This allows the client to dynamically discover and register the tool's specification, enabling the AI to plan its use without prior hard-coded integration. The set of tools can be static or change dynamically based on server state or user permissions.
How MCP Tool Invocation Works
The process by which an AI client securely requests an MCP server to execute an external function.
MCP tool invocation is a client-initiated JSON-RPC request where an AI application calls a predefined function on a remote server. The client sends a tools/call request containing the tool's name and arguments validated against its input JSON Schema. The server executes the corresponding tool handler—a function containing the business logic for actions like API calls or data manipulation—and returns a structured result.
This request-response cycle is managed over a secure MCP transport like stdio or SSE. The server performs schema validation on incoming arguments, and the client can inject the tool's result as dynamic context into the model's session. The entire transaction is logged for audit and observability, ensuring deterministic execution within the agent's workflow.
Frequently Asked Questions
Common questions about MCP Tools, the executable functions that enable AI agents to securely interact with external systems through the Model Context Protocol.
An MCP Tool is an executable function exposed by an MCP server, defined by a name, description, and an input JSON Schema, which a client can invoke to perform actions like calling an API, running a script, or modifying data. It is the fundamental mechanism within the Model Context Protocol for enabling AI agents to take action in the external world. Unlike a static MCP Resource which provides read-only data, a tool is an operation that can have side effects. Its formal specification, or Tool Definition, allows an MCP client (like an AI assistant) to understand its purpose and how to call it correctly, enabling secure and structured integration with backend services, databases, and command-line utilities.
Enabling Efficiency, Speed & Accuracy
Intelligent Analysis, Decision & Execution
We build AI systems for teams that need search across company data, workflow automation across tools, or AI features inside products and internal software.
Talk to Us
Search across company data
Give teams answers from docs, tickets, runbooks, and product data with sources and permissions.
Useful when people spend too long searching or get different answers from different systems.

Automate internal workflows
Use AI to route work, draft outputs, trigger actions, and keep approvals and logs in place.
Useful when repetitive work moves across multiple tools and teams.

Add AI to products and internal tools
Build assistants, guided actions, or decision support into the software your team or customers already use.
Useful when AI needs to be part of the product, not a separate tool.
Related Terms
An MCP Tool is defined by its formal specification and its execution lifecycle. These related concepts detail the components and processes that make tool invocation secure, structured, and observable.
Tool Definition
The formal specification of an executable function within the Model Context Protocol. A Tool Definition is a JSON object containing:
- name: A unique identifier for the tool.
- description: A natural language explanation of the tool's purpose.
- inputSchema: A JSON Schema object that strictly defines the structure, data types, and validation rules for the tool's input parameters. This definition acts as a contract between the server and client, enabling automatic discovery and safe invocation.
Tool Handler
The server-side implementation function that contains the core business logic executed when a tool is invoked. Upon receiving a valid Tool Invocation request, the MCP server calls the corresponding Tool Handler. This function:
- Processes the validated input arguments.
- Executes the intended action (e.g., calling an external API, querying a database, running a script).
- Returns a structured result or error. The handler is where the protocol's declarative interface meets concrete execution code.
Tool Invocation
The act of an MCP client requesting the execution of a defined tool. A Tool Invocation is a JSON-RPC request sent from the client to the server containing:
- The
nameof the tool to call. - An
argumentsobject conforming to the tool's inputSchema. The server performs Schema Validation on the arguments, executes the associated Tool Handler, and returns a response with the result or an error. This is the core operational request in the MCP workflow.
Tool Provider
The component within an MCP server responsible for managing tools. A Tool Provider is an interface that:
- Advertises the available Tool Definitions to the client during Capability Negotiation.
- Routes incoming Tool Invocation requests to the correct Tool Handler.
- Manages the execution context and lifecycle for tool calls. It serves as the central registry and dispatcher for all executable functions exposed by the server.
Schema Validation
The process of verifying that data conforms to a defined structure before processing. In MCP, Schema Validation is critical for safety and reliability:
- Before a Tool Handler is executed, the server validates the invocation's
argumentsagainst the tool's inputSchema. - This ensures type safety (e.g., numbers are numbers, required fields are present), prevents malformed requests from reaching business logic, and is a primary defense against prompt injection attacks that attempt to manipulate tool inputs.
JSON-RPC
The lightweight remote procedure call protocol that underpins all MCP communication. JSON-RPC (JavaScript Object Notation Remote Procedure Call) defines the message format for requests, responses, and notifications between MCP clients and servers. Key aspects include:
- Structured Messages: Every interaction is a JSON object with fields like
jsonrpc,method,id, andparams. - Request-Response Model: Clients send requests with a unique
id; servers send back a corresponding response. - Transport Agnostic: It can be carried over Stdio Transport, SSE Transport, or other layers, with Message Framing ensuring reliable parsing.

About the author
Prasad Kumkar
CEO & MD, Inference Systems
Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.
His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.
Partnered with leading AI, data, and software stack.
How We Work
Custom AI workflows for your Business
One-fit-all AI don't work for modern businesses. At Inferensys, we aim to understand your business & custom requirements; which we use to define most efficient agentic workflows, the data, and the tools for your business.
01
Review the use case
We understand the task, the users, and where AI can actually help.
Read more02
Pick the right approach
We define what needs search, automation, or product integration.
Read more03
Build the first useful version
We implement the part that proves the value first.
Read more04
Improve from there
We add the checks and visibility needed to keep it useful.
Read moreThe first call is a practical review of your use case and the right next step.
Talk to Us