MCP Server setup has two elements which might be straightforward to confuse. Connecting an MCP server, so an AI agent could make its first software name, can take minutes. Making ready it for enterprise use, with the fitting permissions, insurance policies, and consumer rollout, takes for much longer. MCP server infrastructure platforms are the supporting layer that hosts, governs, and secures these servers, and distributors promise to make each elements quick.
G2’s evaluation of 190+ verified evaluations of those platforms tells a messier story: MCP server setup is praised in 27% of evaluations and criticized in precisely 27%. Take out the one largest vendor, and complaints win, 30% to 22%. The hole isn’t random. It lands hardest on enterprises and on finish customers who didn’t configure the platform themselves.
TL;DR: Key findings (G2 Information, 2026)
- Based on G2’s evaluation of 190+ verified MCP server infrastructure evaluations, setup and onboarding are talked about as a like in 27% of evaluations and as a dislike in 27%. No different theme is that this evenly break up
- Based on G2 Information, enterprise reviewers cite a studying curve twice as usually as small enterprise reviewers (22% vs. 11%)
- Based on G2 evaluation knowledge, 19% of finish customers cite a studying curve, in contrast with 4% of directors
- Based on G2 Information, platforms constructed for MCP common 4.92 stars, versus 4.51 for knowledge platforms that added MCP later. Not one of many 70 evaluations of these tailored platforms mentions MCP
Do MCP server platforms actually arrange in minutes?
Connecting an MCP server takes minutes, however establishing full operational deployment requires extra time. Based on G2 Information, 52 verified evaluations record setup as a like and 52 record it as a dislike, making it the one theme the place reward and complaints are tied. Examine that with ease of use (46% constructive, 8% damaging) or integrations (36% constructive, 19% damaging). On the constructive facet, one verified reviewer mentioned requests that used to sit down within the IT queue for weeks now go stay in minutes. One other constructed an end-to-end SQL agent in half-hour.
The 2 sides are usually not describing the identical factor. Based on G2 Information, 54% of the setup feedback in “like” solutions are about velocity. In “dislike” solutions, 72% are about configuration, planning, or understanding the platform. The complaints are usually not about set up. They’re about choices consumers didn’t anticipate to make.
One verified administrator mentioned groups “want to think twice about easy methods to manage MCPs, instruments, expertise, toolkits, IdP teams, and authentication strategies.” A verified marketing consultant mentioned setup took time to grasp, “particularly round governance insurance policies and MCP configuration.”
In MCP, setup isn’t one step. It’s 4 phases, and vendor demos normally present solely the primary:
- Join: Register an MCP server, check in with OAuth, and make the primary software name from an agent. That is the place reviewers reward velocity.
- Scope: Determine which instruments every agent and group might name, map them to id supplier teams, and separate learn actions from write actions.
- Govern: Set approval guidelines, audit logging, and knowledge insurance policies that move a safety evaluation and stream to the SIEM.
- Roll out: Assist finish customers discover accredited instruments, belief them, and know what they nonetheless must construct.
Connecting the primary agent is quick. Deciding who can do what, throughout each software, is the sluggish half. G2 evaluations recommend consumers ought to funds for phases two and three, not simply section one.
Methodology: How I evaluated MCP Server Infrastructure Platforms
G2 analyzed 190+ verified evaluations throughout 60+ merchandise listed in its MCP Server Infrastructure Platforms class, extracted on October 13rd, 2026 and evaluations had been revealed between February 2025 and October 2026. Opinions explicitly discussing MCP had been analyzed individually from broader product suggestions, which was used solely to contextualize total usability.
We used key phrase matching adopted by guide evaluation to determine themes in “like greatest” and “dislike” responses. Setup suggestions was categorised into connection velocity, configuration, permissions and governance, and end-user adoption. Every evaluation counted as soon as per theme and sentiment; a evaluation might contribute to a number of themes and embody each constructive and damaging setup suggestions.
Who Struggles Most With The MCP Server Setup?
Based on G2 Information, the MCP studying curve grows with firm measurement. Small enterprise reviewers cite it in 11% of evaluations, mid-market in 14%, and enterprise in 22%, double the small enterprise price. The reason being scale in three locations without delay:
- Programs: When mid-market and enterprise reviewers title related enterprise techniques resembling Jira, GitHub, Salesforce, and Snowflake, they title 2.4 techniques on common, in contrast with 1.1 for small enterprise reviewers. Every system provides its personal MCP server, and every server exposes many instruments.
- Id teams: Bigger corporations run entry via id suppliers with many teams. Each MCP software must be mapped to the fitting teams, or brokers get an excessive amount of entry or too little.
- Insurance policies: Every software wants guidelines: learn or write, approval or no approval, and what will get logged. Permission choices multiply as techniques × instruments × teams. An organization with 10 techniques, 15 instruments every, and 5 teams faces 750 tool-to-group choices earlier than any coverage is written.
G2 Information backs this up. Not one of the 36 small enterprise reviewers complain about permissions, id, or entry insurance policies. Amongst mid-market and enterprise reviewers, 12% do.
The larger hole is by function. Solely 4% of verified directors point out a studying curve. Amongst finish customers, it’s 19%. This means that the challenges of utilizing an MCP platform might differ from these concerned in configuring it. For groups evaluating MCP infrastructure, the end-user expertise deserves as a lot consideration because the preliminary administrator setup.
Does it matter if a platform was constructed for MCP?
G2’s class definition says it does. To qualify, MCP should be a product’s predominant interface, “not a REST or GraphQL API with an MCP wrapper added later.” Verified evaluations again that line up.
Based on G2 Information, platforms constructed round MCP (Willow, Composio, and AdPlug MCP) common 4.92 stars throughout 106 verified evaluations. Information platforms that added MCP to an older product (K2View and CData Connectors) common 4.51 throughout 70. Studying-curve complaints are thrice increased on the tailored facet (30% vs. 10%). And never a kind of 70 evaluations mentions MCP in any respect. Patrons are nonetheless reviewing them as knowledge integration instruments. One verified G2 consumer mentioned, “There are too many components to make use of, and it is not clear what every one is for.”
The takeaway for consumers: An “MCP help” checkbox doesn’t inform consumers how a product will behave for an agent group. The distinction is operational:
4 questions that settle doubts in a demo:
- Can we permit one MCP software and block one other for a similar consumer?
- Does each software name log the human id behind the agent?
- Are instruments designed for agent duties, or copied from API endpoints?
- Does the product help the July 28, 2026, stateless MCP specification?
Connecting an agent is simply the start. As MCP evolves, how a lot implementation complexity a platform absorbs versus leaves with the customer is turning into a key analysis criterion.
Is MCP changing APIs, and what does Stateless MCP change?
MCP isn’t changing APIs. Most MCP servers nonetheless name a REST API beneath. What MCP replaces is the customized connector work on prime, so any compliant agent can uncover and name a software with out one-off code.
MCP is now ruled by the Linux Basis’s Agentic AI Basis, co-founded by Anthropic, Block, and OpenAI. For consumers standardizing on MCP, that reduces lock-in danger. Spec modifications undergo an open proposal course of, and the July 2026 revision launched a formal lifecycle with a minimal 12-month deprecation window, so groups can plan upgrades on a schedule. The 4 predominant SDKs, TypeScript, Python, Go, and C#, already help the brand new revision with backward compatibility.
What modified within the July 28, 2026, stateless MCP specification?
The 2026-07-28 MCP specification eliminated protocol-level periods. In plain phrases: an MCP server not remembers a dialog between requests. Earlier than, a connection opened with a handshake and saved a session ID for its lifetime. Now each request carries its personal context, and any server that should keep in mind one thing should return an specific ID resembling a workflow or cart ID that the agent passes into the following name.
What further setup work does stateless MCP create, and who handles it?
The modifications within the official changelog make internet hosting easier however transfer a number of tasks into the setup section. Every merchandise lands with a distinct proprietor:
For consumers, this connects straight again to the setup query. Stateless MCP makes the join section simpler and provides work to the scope and govern phases, the identical configuration and planning work behind 72% of setup complaints in G2 evaluations. The sensible check for any MCP server infrastructure platform is what number of rows on this desk it takes off the applying group’s plate.
Regularly requested questions (FAQs) about MCP server infrastructure
Q1. What’s an MCP server, and the way do you set one up?
An MCP server is a program that exposes instruments, knowledge, and prompts to AI brokers via the Mannequin Context Protocol. A fundamental MCP server setup has 4 steps: select or construct a server with an official SDK, run it domestically or at a distant HTTPS endpoint, register it in an MCP consumer resembling an AI assistant or IDE, and check in with OAuth. Enterprise use provides a fifth step, scoping permissions, which is the place G2 reviewers report essentially the most friction.
Q2. What are the infrastructure necessities for an MCP server?
An area MCP server wants solely the runtime for its SDK, resembling Node.js or Python, and an MCP consumer. A distant server for a group wants an HTTPS endpoint utilizing the Streamable HTTP transport, an OAuth-compatible authorization server, and logging. For the reason that July 2026 specification, it not wants sticky periods or a shared session retailer. Enterprise deployments add id supplier integration, per-tool entry management, and audit logs, the layer MCP server infrastructure platforms present.
Q3. What are examples of MCP servers?
The MCP steering group maintains reference servers together with Every little thing, Fetch, Filesystem, Git, Reminiscence, Sequential Pondering, and Time. Revealed servers are listed within the official MCP Registry. Industrial examples on G2 embody AdPlug MCP, a hosted MCP server for Google Advertisements and LinkedIn Advertisements, and K2View, which supplies an MCP server for every knowledge product.
This fall. The place do you have to host MCP servers?
Host an MCP server domestically when one individual makes use of it from a desktop software. Host it remotely when a group or manufacturing agent wants it: in containers, on Kubernetes, on serverless platforms resembling AWS Lambda, or on a managed MCP server infrastructure platform. The stateless 2026 specification makes serverless and load-balanced internet hosting easier as a result of requests not rely on a session.A5.
Q5. Is there a free MCP server for testing?
Sure. The official reference servers are open supply and free, and the Every little thing server is constructed for testing prompts, assets, and instruments. The maintainers state that reference servers are academic examples, not production-ready options.
Q6. Are MCP servers secure?
An MCP server is as secure as its permissions, authentication, and code. The official MCP safety greatest practices title particular dangers, together with confused deputy assaults, token passthrough, server-side request forgery, state deal with hijacking, and compromised native servers. The core defenses are least-privilege scopes, tokens validated for the particular server, sandboxed native servers, state handles certain to the signed-in consumer, and audit logs. Groups with stricter wants usually add AI safety options.
Q7. How do I safe my MCP server?
Begin with minimal OAuth scopes and request extra solely when a software wants them, by no means move a consumer’s token via to a downstream API, require HTTPS, and log each software name with the consumer behind it. For native servers, present customers the precise command earlier than it runs and execute it in a sandbox. These steps come from the official MCP safety greatest practices.
Q8. Is an MCP server like an API gateway?
No. An MCP server exposes capabilities to AI brokers, whereas an API gateway sits in entrance of APIs to route, authenticate, and rate-limit visitors. The 2 meet in MCP gateways: some MCP server infrastructure platforms sit in entrance of many MCP servers to implement coverage, a job that overlaps with AI gateways. The 2026 specification’s Mcp-Technique and Mcp-Title headers make per-tool gateway guidelines simpler to use.
The underside line on the MCP server infrastructure
Based on G2’s evaluation of 190+ verified evaluations, connecting an MCP server is quick, however getting a group prepared to make use of it’s not. MCP server setup is praised and criticized in equal measure. Studying-curve complaints double at enterprise scale and are almost 5 occasions increased amongst finish customers than directors.
The July 2026 stateless MCP specification widens that hole. It makes internet hosting simpler, but it surely provides idempotency keys for instruments that ship, pay, or provision; specific handles rather than periods; and retry flows for any software that asks a consumer for enter. Each a kind of lands in the identical configuration and planning work that G2 reviewers already flag.
Earlier than selecting an MCP server infrastructure platform, consumers ought to verify three issues:
- Setup help: Does the seller present guided onboarding, templates, and assist migrating to the 2026-07-28 specification? Which of the stateless duties, resembling retries, idempotency, and state handles, does the platform deal with by default?
- Permissions: Can entry be set per MCP software and per consumer, mapped to id supplier teams, with least-privilege defaults and each name logged to a named individual?
- Rollout: How will finish customers discover accredited instruments and study what every one does? Ask to see the end-user view, not simply the admin console.
The query for 2026 is not how briskly an agent can join. It’s how briskly an entire group can use it safely, and what occurs when the identical request runs twice.
Can NLG software program ship high quality as quick because it delivers content material? Discover G2’s newest analysis to see what verified consumers say about velocity, ROI, and the place human modifying nonetheless issues.
