Addressing security & quality issues with MCP tools - Vercel
Sep 17, 2025

Summary
Introduced `mcp-to-ai-sdk`, a CLI tool that generates static AI SDK tool definitions from Model Context Protocol (MCP) servers. This addresses security risks (prompt injection, unexpected capability introduction), cost issues (unneeded context usage), and reliability problems (upstream drift, generic descriptions) associated with dynamic MCP tool definitions in production AI agents. The tool allows for vendoring tool definitions into the codebase, enabling version control, selective loading, customization, and improved reliability by locking schemas and descriptions.