Idea Ripper // ArchiveCards: 1555 [Live] | Updated: 2026-10-14
Card #c24IR // #c24Synthesis

MCP is an interoperability protocol, not a complete governance framework. A regulated institution must therefore place a separate financial control envelope around MCP-based tool use. This envelope includes identity, least-privilege authorization, typed tool contracts, point-in-time evidence checks, deterministic numerical recomputation, approval gates, idempotent execution, and tamper-evident audit records.

— In our words · Source: Large Language Models in Finance (Miquel Noguer i Alonso)

[Use when]

When wiring MCP tools into a regulated workflow, build the control envelope first: identity, least-privilege auth, typed contracts, approval gates, audit records.

[Why it matters]

A protocol standardizes how tools talk; it says nothing about who may call them, with what authority, or what happens when they lie. Treating MCP as governance is like treating TCP as a firewall — the envelope has to be built separately, or every connected tool inherits the model's authority by default.

Related principles

#c18The central purpose of governance is not to prevent the use of LLMs. It is to make valuable uses repeatable while keeping failure within…Use when a governance or model-risk proposal is being dismissed as bureaucracy that slows the business down.

More from Large Language Models in Finance

#c13Prediction and agency should not be conflated. A credit model can estimate the probability that a borrower breaches a covenant. An agentic…Use when a team proposes a stronger model as the fix for an agent that lacks memory, permissioning, or an… #c14The technically and institutionally mature objective is bounded autonomy : the agent can plan, retrieve, calculate, and propose actions…Use when deciding what an AI agent is permitted to do in production: which actions stay read-only, which need… #c15This principle prevents a common category error. A model that says it will respect a mandate has not yet respected the mandate. A model…Use when a vendor demo, benchmark score, or red-team chat log is being offered as proof that an agent is safe…