# Tackling MCP security challenges with the MCP API delegation pattern

DevFeed: [Tackling MCP security challenges with the MCP API delegation pattern](<https://devfeed.tech/articles/tackling-mcp-security-challenges-with-the-mcp-api-delegation-pattern-57187.md>)

Original publisher: [Read original article](<https://www.thoughtworks.com/insights/blog/generative-ai/Tackling-MCP-security-challenges-with-the-MCP-API-delegation-pattern>)

Author: Steven Peh

Published: 2025-09-05T00:00:00Z

Content type: article

Language: en

Sources: [Thoughtworks Insights](<https://devfeed.tech/sources/thoughtworks-insights.md>)

Topics: [Model Context Protocol](<https://devfeed.tech/topics/model-context-protocol.md>), [Security](<https://devfeed.tech/topics/security.md>), [API](<https://devfeed.tech/topics/api.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [API layers](<https://devfeed.tech/topics/api-layers.md>)

Tags: [access-controls](<https://devfeed.tech/tags/access-controls.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [api](<https://devfeed.tech/tags/api.md>), [apis](<https://devfeed.tech/tags/apis.md>), [architectures](<https://devfeed.tech/tags/architectures.md>), [blog](<https://devfeed.tech/tags/blog.md>), [engineering-sub-page](<https://devfeed.tech/tags/engineering-sub-page.md>), [generative-ai](<https://devfeed.tech/tags/generative-ai.md>), [layers](<https://devfeed.tech/tags/layers.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [mcp-security](<https://devfeed.tech/tags/mcp-security.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

This article examines security challenges in remotely accessible Model Context Protocol servers, including unintended access, inadequate access controls, and injection risks. It recommends delegating security to existing API infrastructure instead of re-architecting resource access for MCP.

## Source excerpt

Tackling MCP security challenges with the MCP API delegation pattern