Interactive Explainer
Model Context Protocol (MCP) โ the open standard that turns AI from a chatbot into a system that can query databases, call APIs, and take actions.
Without MCP, AI can only work with text you paste into it. It can't look things up, check databases, or take actions in your systems. MCP changes that.
Export CSV โ paste into chat โ AI analyzes what you gave it. Manual, one-at-a-time.
AI queries your database directly, gets exactly what it needs, analyzes live data. Automatic.
Just as USB-C connects any device to any peripheral, MCP connects any AI to any data source.
Works with Claude, ChatGPT, Kiro, Cursor, VS Code โ build once, connect everywhere.
Your team works with databases, spreadsheets, document stores, and internal APIs every day. MCP lets AI access these systems the same way you do โ but faster.
| Today (Manual) | With MCP (Automated) |
|---|---|
| Export claims data to CSV, paste into AI | AI queries claims database directly |
| Open 50 medical reports one by one | AI scans the claims documents folder automatically |
| Check policy coverage across 3 different systems | AI checks all 3 systems in one request |
| Copy policyholder data, format it, paste it | AI runs SQL query, gets exactly what it needs |
| Manually send alert when fraud detected | AI sends the alert automatically via MCP |
Both APIs and MCP let systems talk to each other. But they solve different problems and work at different levels. Here's the clearest way to think about it:
A contract between two systems. "Send me this request, I'll give you this response." Designed for programs to talk to programs.
A contract between AI and systems. "Here are the tools I offer โ the AI decides when and how to use them." Designed for AI to discover and use capabilities.
| Aspect | Traditional API | MCP |
|---|---|---|
| Who calls it? | A developer writes code: fetch('/api/claims') | The AI decides on its own: "I need claims data, let me call read_query" |
| Discovery | Developer reads API docs, writes integration code | AI asks the server "what tools do you have?" and figures it out |
| Flexibility | Fixed endpoints โ each use case needs a specific API call | AI composes tools dynamically โ same tools, infinite use cases |
| Who builds it? | Developers build and maintain integrations | Configure once, AI handles the rest |
| Error handling | Developer codes retry logic, error parsing | AI reads the error, adjusts its approach, tries again |
A developer writes this code:
Requires: developer time, API knowledge, error handling code, maintenance when API changes.
You just ask in plain English:
Requires: MCP server configured (one-time JSON file). No code, no API knowledge needed.
MCP doesn't replace APIs โ it wraps them so AI can use them. Many MCP servers are just thin wrappers around existing APIs.
| Scenario | Use API directly | Use MCP |
|---|---|---|
| Building a web app that shows claims dashboard | โ Yes โ your app code calls the API | โ No โ apps don't need AI reasoning |
| AI agent that investigates claims fraud patterns | โ No โ AI can't call APIs on its own | โ Yes โ AI discovers and calls tools |
| Automated report that pulls from policy, claims, and underwriting databases | โ ๏ธ Possible but needs custom code | โ Yes โ AI queries all 3 via MCP |
| Slack bot that responds to commands | โ Yes โ fixed command โ fixed response | โ Also works โ AI reasons about the request |
| Dashboard with real-time charts | โ Yes โ direct data pipeline | โ No โ MCP is for AI, not dashboards |
MCP follows a simple client-server pattern. The AI application (Kiro) is the host. It creates clients that connect to servers. Each server provides access to a specific data source or tool.
Every MCP server can expose three types of capabilities:
Actions the AI can perform: run a SQL query, call an API, send a message. The AI decides when to use them.
Data the AI can read: file contents, database schemas, API responses. Like giving the AI access to a document.
Reusable templates that structure how the AI interacts with the server. Like pre-built query patterns.
When you configure an MCP server in Kiro, here's what happens under the hood:
| Step | What happens | You see |
|---|---|---|
| 1. Configure | You add the server to .kiro/settings/mcp.json | Edit a JSON file |
| 2. Connect | Kiro launches the MCP server process and negotiates capabilities | Green checkmark โ in MCP panel |
| 3. Discover | Kiro asks the server "what tools do you have?" via tools/list | Tool names appear in the panel |
| 4. Use | When you ask a question, Kiro decides which tool to call and sends a tools/call request | AI response includes data from the server |
Watch messages flow through the full MCP architecture as you ask a question. Each step shows exactly what's happening between components.
These are the most common MCP servers your team would use. You specify what connections are needed in the Agent Design Canvas โ your tech team configures the actual servers.
| MCP Server | Connects to | Insurance use case | Setup |
|---|---|---|---|
| SQLite / PostgreSQL | Databases | Query policy data, claims history, underwriting records | Config only |
| Filesystem | File directories | Process folders of medical reports, scan claim documents | Config only |
| Slack / Teams | Team messaging | Send alerts when fraud pattern detected | API key |
| Google Drive / S3 | Document storage | Read policy wordings and product specs for RAG grounding | OAuth / IAM |
| Email (SMTP) | Email systems | Send claims decisions, escalation alerts | SMTP config |
| Custom REST API | Internal services | Call underwriting rules engine, claims adjudication API | Custom build |
This is what an MCP configuration looks like in Kiro. It's a simple JSON file โ no code required:
That's it โ 7 lines of JSON. Kiro launches the SQLite MCP server, connects to it, and you can start querying the database in plain English.
MCP is the fourth and final layer of the Kiro automation stack. Here's how all 4 layers work together:
| Layer | What it does | In the fraud detection workflow |
|---|---|---|
| Steering | Sets global rules | SGD currency, no PII (NRIC/policy numbers), APPROVE/FLAG/REJECT ratings |
| Skill | Defines the investigation process | Claims Fraud Investigator persona, investigation report format, guardrails |
| Hook | Triggers automatically | New claim flagged โ run fraud investigation skill |
| MCP | Connects to data | SQLite server โ query policyholder profile, claims history, provider records |
| Module | What you learn | What you build |
|---|---|---|
| M1-M2 | What agents are, how they work | Understanding of agent architecture |
| M3 | Workflow patterns (chain, parallel, route, orchestrate) | Pattern selection for insurance workflows |
| M4-M5 | AWS tools, frameworks (Kiro, Strands, AgentCore) | Hands-on with Kiro skills, hooks, MCP |
| M6 | Custom solutions, guardrails, evaluation | Working agent with database connection |
The thread: Module 1's agent concepts โ applied in Module 3's workflow patterns. Module 3's patterns โ implemented in Module 5's hands-on labs. Module 4's tools โ connected via Module 5's MCP. Everything builds on what came before.