← Back to blog

MCP in Practice — Servers, Scenarios, and Security

Who supports MCP?

ToolSupportHow it uses MCP
ClaudeNative (Anthropic created MCP)Claude.ai, Claude Code — Slack, Jira, GitHub, Gmail, Calendar
ChatGPTYes (since March 2025)Desktop app, Codex
GitHub CopilotYes — MCP Registry in VS CodeAgent mode, discover & install servers
CodexYes — CLI as MCP serverOrchestrated by other agents via MCP
RovoYesJira/Confluence natively + third-party
OpenClawYes — model-agnosticSkills + MCP servers
GeminiA2A as complement to MCPGemini Code Assist supports MCP servers

MCP servers useful for QA

ServerWhat it gives testers
JiraCreating/editing tickets, searching bugs from within AI
ConfluenceReading documentation, requirements, test plans
GitHubPR reviews, creating issues, triggering CI/CD
SlackNotifications, reading channels
Sentry / DatadogAnalyzing production errors, alerts
PlaywrightAI runs browser tests, debugs failures
Custom serverMCP server for your internal test runner, QA metrics

Scenario: bug analysis with MCP

Tester: “Check if bug PROJ-1234 has a sufficient description and suggest missing information”

  1. Jira MCP → fetches the bug description
  2. Confluence MCP → searches for related requirements
  3. GitHub MCP → checks recent commits in the service
  4. Claude (reasoning) → identifies gaps: API version, reproduction steps, expected vs actual
  5. Jira MCP → adds a comment with the supplementary information
  6. Slack MCP → notifies the team

One interaction instead of manually jumping between 4 tools.

MCP security

  • Consent before action — the host MUST ask for consent before executing a tool
  • Least privilege — minimal permissions, read-only where possible
  • Audit trail — log what the agent did, when, and on whose instruction
  • Prompt injection — MCP tool descriptions can contain malicious instructions
  • OAuth + RFC 8707 — tokens scoped to a specific MCP server

How to start?

  1. Check what you already have — Claude.ai has built-in MCP for Slack, Google Drive, Atlassian
  2. Install MCP in VS Code — Copilot has an MCP Registry
  3. Identify repetitive workflows — what do you do manually 10 times a day?
  4. Start with read-only — read first, write later
  5. Write your own MCP server — a simple server in TypeScript/Python takes a few hours

In the next post: 6 Practical AI Examples in QA — ready-to-copy prompts.