{"id":22038,"date":"2026-04-30T11:31:14","date_gmt":"2026-04-30T11:31:14","guid":{"rendered":"https:\/\/ideainthebox.com\/index.php\/2026\/04\/30\/a-guide-to-apis-and-mcps-and-mcp-gateways\/"},"modified":"2026-04-30T11:31:14","modified_gmt":"2026-04-30T11:31:14","slug":"a-guide-to-apis-and-mcps-and-mcp-gateways","status":"publish","type":"post","link":"https:\/\/ideainthebox.com\/index.php\/2026\/04\/30\/a-guide-to-apis-and-mcps-and-mcp-gateways\/","title":{"rendered":"A guide to APIs, MCPs, and MCP Gateways"},"content":{"rendered":"<div>\n<p> APIs and MCPs are often mentioned in the same breath as ways that systems can exchange information, but they are designed differently and have different purposes. This article hopes to explain the differences and how software developers and users should approach interaction with each. <\/p>\n<p> An API is mainly found in software applications, while an MCP (Model Context Protocol), is found in use by large language models. APIs let one application talk to another, and an MCP lets an AI model use data and tools in structured ways. The difference comes about because LLMs, responding to user requests, need to choose which tools it thinks it needs to achieve an outcome. <\/p>\n<div id=\"outline-container-org97eb392\" class=\"outline-3\">\n<h3 id=\"org97eb392\">APIs: Simple definition<\/h3>\n<div class=\"outline-text-3\" id=\"text-org97eb392\">\n<p> An API sends a request in an agreed format to another software instance, and receives a response also in an agreed format, with the details of each exchange\u2019s protocols or methods of behaviour hard-coded. Developers write code to call out to an API and creates code to parse, or handle the response. This makes APIs precise and reliable \u2013 although the interchange can falter if either party changes the code governing the API\u2019s behaviour. <\/p>\n<p> APIs are still important to systems using LLMs, and many AI-based systems rely on APIs to function. A model may request data, and get responses via an API. <\/p>\n<\/div>\n<\/div>\n<div id=\"outline-container-orgd48cf27\" class=\"outline-3\">\n<h3 id=\"orgd48cf27\">MCPs: Simple definition<\/h3>\n<div class=\"outline-text-3\" id=\"text-orgd48cf27\">\n<p> MCPs are used when LLMs need access to data in situations like needing to query business data repositories, read the contents of particular files, or trigger an action. MCPs give models a structured way to access multiple data sources via one interface. An MCP server exposes data in a standard format according to rules set up in advance. These rules determine what is available and to whom or what. <\/p>\n<p> MCP servers expose three kinds of ability: <\/p>\n<ul class=\"org-ul\">\n<li><b>Tools<\/b> are actions the model may instigate, like creating a file or searching a database.<\/li>\n<li><b>Resources<\/b> are information the model may read as context.<\/li>\n<li><b>Prompts<\/b> are reusable templates that help users perform common tasks, without having to write a detailed prompt every time they perform the same action.<\/li>\n<\/ul>\n<p> The important difference is that MCPs are designed for a model to be the direct consumer of data. The model suggests which tools or resources it requires according to what it thinks may be relevant to the user\u2019s request. <\/p>\n<\/div>\n<\/div>\n<div id=\"outline-container-org97094f5\" class=\"outline-3\">\n<h3 id=\"org97094f5\">Why MCPs are not an API wrappers<\/h3>\n<div class=\"outline-text-3\" id=\"text-org97094f5\">\n<p> In some systems, APIs remain in use, but have an MCP placed between it and the user. An MCP server might call an API \u2018behind the scenes\u2019. However, an API may return more information by default than a model needs to achieve a task. But as every byte of data will need to be processed by the LLM, this can burn through many more tokens than are necessary. Too much information increases costs and can make the model\u2019s answer less accurate. <\/p>\n<p> For example, an API might return 50 database fields about a customer, but the LLM requires a single account status entry. Sending all 50 fields gives the model more to process, which doesn\u2019t necessarily provide useful context. The LLM has no idea of the relevance of the data until it has used processing cycles to determine the fact. Additionally, it may base its responses on extraneous data, and give inaccurate answers. <\/p>\n<p> In an ideal scenario, MCP tools are designed around the tasks a model needs to complete. If the user asks how many customers are subscribed to a particular service, or have bought a specific item, for example, the MCP tool will return the relevant numbers, rather than complete customer interaction records. <\/p>\n<\/div>\n<\/div>\n<div id=\"outline-container-orgc050f47\" class=\"outline-3\">\n<h3 id=\"orgc050f47\">When each are used<\/h3>\n<div class=\"outline-text-3\" id=\"text-orgc050f47\">\n<p> Use an API when one application needs to communicate with another application through a whereby there is full knowledge between both parties as to what information is required. A website, mobile app, internal system, payment platform, or reporting tool will often use APIs. <\/p>\n<p> If the consumer is an AI model that needs access to undefined information or actions, an MCP should be used. An AI assistant that answers staff questions (with variable input, therefore) or is tasked to review internal documents, for example, may use MCPs. <\/p>\n<p> In many organisations, both exist. A customer app that can present specific information (account balance for instance) may call APIs. An AI assistant in the same app may use an MCP server because the nature of the queries it will create on behalf of the user will vary. Both may reach the same underlying data, but do so through different interfaces according to the system \u2018asking\u2019. <\/p>\n<\/div>\n<\/div>\n<div id=\"outline-container-orgd53062b\" class=\"outline-3\">\n<h3 id=\"orgd53062b\">Security and gateways<\/h3>\n<div class=\"outline-text-3\" id=\"text-orgd53062b\">\n<p> A gateway is a device (usually instantiated in software) that fronts both types of service. It handles authentication, rate limits, logging, monitoring, and access control. If MCP use grows, organisations need to know which AI tools requesting data from which systems, what data they are allowed access to, and what actions they can perform on that data. A gateway can create a place to manage these types of controls. <\/p>\n<p> However, as they operate at the network layer (arbitrating and recording data movement), they do not solve problems that come from the software layer (including LLMs, deterministic code, or user activity). In cybersecurity terms, they can be thought of as a firewall: useful in certain contexts, but like firewalls, they can be circumvented and might give a false sense of security. MCP and API gateways are, arguably, perimeter defences, that will not reliably prevent data-related incidents. <\/p>\n<p><em>(Image source: Pixabay under <a href=\"https:\/\/pixabay.com\/service\/license-summary\/\">licence<\/a>.)<\/em><\/p>\n<p>\u00a0<\/p>\n<p><a href=\"https:\/\/www.ai-expo.net\/?utm_source=AI-News&amp;utm_medium=Footer-banner&amp;utm_campaign=world-series\"><img class=\"lazyload\" decoding=\"async\" src=\"data:image\/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==\" data-orig-src=\"https:\/\/www.artificialintelligence-news.com\/wp-content\/uploads\/2025\/08\/ai-expo-banner-2025.png\"><\/a><\/p>\n<p><strong>Want to learn more about AI and big data from industry leaders?<\/strong> Check out <a href=\"https:\/\/www.ai-expo.net\/\">AI &amp; Big Data Expo<\/a> taking place in Amsterdam, California, and London. The comprehensive event is part of <a href=\"https:\/\/techexevent.com\/\">TechEx<\/a> and co-located with other leading technology events. Click <a href=\"https:\/\/techexevent.com\/\">here<\/a> for more information.<\/p>\n<p>AI News is powered by <a href=\"https:\/\/techforge.pub\/\">TechForge Media<\/a>. Explore other upcoming enterprise technology events and webinars <a href=\"https:\/\/techforge.pub\/events\/\">here<\/a>.<\/p>\n<\/div>\n<\/div>\n<p>The post <a href=\"https:\/\/www.artificialintelligence-news.com\/news\/a-guide-to-apis-and-mcps-and-mcp-gateways\/\">A guide to APIs, MCPs, and MCP Gateways<\/a> appeared first on <a href=\"https:\/\/www.artificialintelligence-news.com\/\">AI News<\/a>.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>APIs and MCPs are often mentioned in the same breath  [&#8230;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"categories":[226],"tags":[],"class_list":["post-22038","post","type-post","status-publish","format-standard","hentry","category-technology"],"acf":[],"_links":{"self":[{"href":"https:\/\/ideainthebox.com\/index.php\/wp-json\/wp\/v2\/posts\/22038","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ideainthebox.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ideainthebox.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ideainthebox.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ideainthebox.com\/index.php\/wp-json\/wp\/v2\/comments?post=22038"}],"version-history":[{"count":0,"href":"https:\/\/ideainthebox.com\/index.php\/wp-json\/wp\/v2\/posts\/22038\/revisions"}],"wp:attachment":[{"href":"https:\/\/ideainthebox.com\/index.php\/wp-json\/wp\/v2\/media?parent=22038"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ideainthebox.com\/index.php\/wp-json\/wp\/v2\/categories?post=22038"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ideainthebox.com\/index.php\/wp-json\/wp\/v2\/tags?post=22038"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}