A cloud-scale gateway system for MCP service is presented, which breaks the direct-connect model on the data plane and offloads legacy service integration, consolidating incompatible MCP variants, access control, tool recommendation, and session-aware routing to the gateway.
Abstract
LLM agents increasingly rely on tool calling to act on external systems, and the Model Context Protocol (MCP) has quickly become its de facto interface. Operating MCP at cloud scale, however, becomes difficult. On the tool provider side, legacy services are not directly callable through MCP; the rapid protocol development also creates ongoing compatibility cost. On the agent side, the number of accessible tool is limited by the LLM context window and inference overhead; mounting a large tool set increases token usage and inference latency and can reduce task success rate. Moreover, for stateful MCP backends with multiple replicas, preserving session affinity increases client-side complexity. We present a cloud-scale gateway system for MCP service. It breaks the direct-connect model on the data plane and offloads legacy service integration, consolidating incompatible MCP variants, access control, tool recommendation, and session-aware routing to the gateway. Hybrid retrieval sustains 98% Top-15 recall; it scales agent tool access to 3,000+ with high tool selection accuracy, and reduces tool selection time by $8.9\times$ and token usage by $23.8\times$, with low per-call overhead, stable under scale-out. Finally, we share the lessons learned from deploying the gateway system in production.
The gateway breaks the direct-connect data plane and consolidates legacy API integration, protocol bridging, access control, and session-aware routing, while scaling out elastically at low per-call overhead.
Ming-Xing Li, Enge Song, Yueshang Zuo et al.· Asia-Pacific Workshop on Net...· 0 citations
This work presents SCOUT (Selective Context Optimization for Universal Tooling for Universal Tooling), which reframes tool exposure as a context-selection problem, injecting only tools relevant to the current step, and reduces MCP tool-token consumption by 99%, cutting per-query inference cost at enterprise scale.
Olympia Saha, Amy Wang, Srinivasan Manoharan· 0 citations
TransForm is presented, a control/data-plane split in which MCP returns a small envelope plus a machine-readable descriptor, and large payloads are delivered over stream-able HTTP as JSON, Parquet, or Arrow IPC (blob or chunk stream).
Per-server prompt engineering is therefore a workaround rather than a fix; it is argued that MCP host applications should provide an explicit mechanism that places server instructions ahead of tool selection in the client LLM's deliberation.
Minhan Cho, Soyoung Park, Kihyeon Jeong et al.· 0 citations
SemSpot is presented, a semantics-aware service model that allows agent applications to leverage the spot capacity of LLM inference platforms and develops the service model, economic boundary, and the cross-layer research agenda required to realize SemSpot.
An empirical study of router-side injection in coding agents, examining four intervention levels of increasing subtlety and developing SIDEL, a framework for trace recording, replay, injection, and defense evaluation, which is evaluated four representative coding agents, and further evaluates whitelist-based execution...
Donghao Fu, Jingxin Li, Xue Jiang et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.