Skip to content
Preprint

LLM within MCP Matters: Measuring Inefficient Resource Utilization Driven by LLMs

Aug 2026 · 0 citations · 11 references
Computer Science

TL;DR

Per-server prompt engineering is therefore a workaround rather than a fix; it is argued that MCP host applications should provide an explicit mechanism that places server instructions ahead of tool selection in the client LLM's deliberation.

Abstract

The Model Context Protocol (MCP) standardizes how servers expose data and tools to Large Language Models (LLMs). A common server design embeds frequently used reference data, such as identifier lookup tables, directly in the server instructions: the system-prompt text a server hands to the host application. When a query concerns an entry of the embedded table, the model can act on it immediately instead of re-discovering the same information through a search tool. We test whether client LLMs actually consume such instruction-embedded data, reporting a 54,000-trial study across 24 LLMs (9 Claude, 6 Gemini, 9 GPT) on a production legal-information MCP server. A diagnostic condition that removes the competing search tool shows that failures are dominated by behavioral preference rather than missing capability. With search unavailable, 23 of 24 models read the embedded data reliably (hit ratio at least 98%); with a search tool merely present, 9 models drop below 15%. A 2^3 factorial analysis of three instruction-level interventions reveals strong interaction effects: combining all three restores at least 86% for 20 of 24 models, but individual interventions can backfire for specific model families. Per-server prompt engineering is therefore a workaround rather than a fix; we argue that MCP host applications should provide an explicit mechanism that places server instructions ahead of tool selection in the client LLM's deliberation.

View source

Similar papers

Jul 2026

An Empirical Study of Model Context Protocol Applications

A large-scale study of 1,723 MCPApps mined from GitHub, characterizing server integration across configuration, SDK use, and human-in-the-loop mechanisms and showing that the ecosystem has converged on some practices but not others.

Muhammad Hamza Arshad Majeed, May Mahmoud, Sarah Nadi · 0 citations
#artificial intelligence Preprint Sep 2026

What a Random Draw from the MCP Registry Contains, and What Tool-Use Benchmarks Contain Instead

Studies of the Model Context Protocol (MCP) server ecosystem draw their samples in ways that quietly select for servers that work: reference sets, popularity lists, hand-curated frames, or pipelines that repair a server until it starts. We report what an unrepaired probability sample actually contains. From a 24,135-se...

H. M. Afsar · 0 citations
Open access Aug 2026

Middleware-Assisted Dynamic IP Blacklisting for MikroTik RouterOS Using Flask and AbuseIPDB: A Single-Site Operational Case Study

The engineering contribution is a RouterOS-oriented integration pattern that isolates the provider credential, transforms the reputation feed into an ingestible plaintext representation, and bounds router-side processing through pagination and defensive validation.

Ardiansyah Ardiansyah, Hartinah Hartinah, Wahyuddin Saputra · 1 citation
Review Open access Aug 2026

Controlling PII Disclosure in Database MCP Connectors

A reproducible benchmark and reference-gateway design, evaluated on synthetic data, for what controls at that boundary can and cannot do, and quantifying why value-level detection must be a backstop, not the primary control.

Ye.Ye. Piotrovskyi · 0 citations
Preprint Aug 2026

OoO-Spec: Out-of-Order Semantic Speculation for Fast Tool Calling

OO-Spec is fastest among all evaluated methods in all 21 target-benchmark cells, and outperforms every evaluated released learned drafter in each comparable cell, while the same sidecar improves on ToolSpec by 34.1% on average.

Zhi-Heng Zhang, Mu-Jie Xu, Fei Sun et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.