Updated 1 minute ago

Share this article

Related News

Meta’s WhatsApp Business MCP: setup, test messages and production limits

Sep 16, 2026

Meta’s WhatsApp Business MCP: setup, test messages and production limits

Meta’s September 15 MCP launch connects coding agents to WhatsApp setup and test messages. The tool references show where admin permissions, webhook tests and a separate Cloud API integration divide the work.

WhatsApp BusinessModel Context ProtocolMeta

Google I/O 2026: AI, Gemini Updates, and Android XR Innovations

May 4, 2026

Google I/O 2026: AI, Gemini Updates, and Android XR Innovations

Google I/O 2026 kicks off May 19, showcasing the latest AI advancements. Expect a major Gemini update, new Android XR innovations, and the debut of Aluminum OS. With a strong focus on AI, the event sets the stage for Google's future product lineups.

Google I/O 2026AIGemini

Anthropic Unveils Claude Mythos Preview: Power Meets Privacy in AI

Apr 20, 2026

Anthropic Unveils Claude Mythos Preview: Power Meets Privacy in AI

Anthropic's Claude Mythos Preview tackles cybersecurity vulnerabilities with unmatched prowess but stays out of public reach due to potential misuse. Instead, it's leveraged via Project Glasswing—a strategic move involving big tech partners like Google Cloud and AWS.

AnthropicClaude Mythos PreviewAI models

Apigee Hybrid brings MCP tool traffic inside customer Kubernetes clusters — Source: Google Cloud Documentation / screenshot captured by OpenToolsSource image

Agent Infrastructure

Apigee Hybrid brings MCP tool traffic inside customer Kubernetes clusters

By OpenTools Team

Apigee Hybrid 1.17.0 can run its MCP data plane inside a customer Kubernetes cluster, keeping runtime tool calls local while Google’s control plane supplies configuration.

The MCP runtime can stay inside the customer cluster

Google announced MCP support in Apigee Hybrid 1.17.0. The MCP data plane runs in the customer’s Kubernetes cluster, while the Google‑managed control plane supplies configuration. Runtime tool traffic does not need an inbound path from Google.

The component exposes selected OpenAPI 3.0.x operations as MCP tools and implements JSON‑RPC operations such as tools/list and tools/call. It also propagates W3C trace context for observability.

Keeping the runtime local reduces one network boundary. It does not remove the need to secure the cluster, APIs or agent caller.

Enablement is off by default and installation order matters

The feature is disabled by default. Google’s enablement guide requires the 1.17.0 hybrid software and Helm configuration for the operator and organization charts. The operator chart must be applied before the organization chart.

Google warns that reversing the order can leave the change unapplied without an obvious deployment failure. Confirm the resulting MCP data‑plane pods and configuration instead of treating a successful Helm command as acceptance.

The default deployment uses two replicas and can autoscale to ten. Set resource and disruption policy from measured load rather than assuming defaults fit every cluster.

The internal trust boundary still needs a network policy

The hybrid‑specific documentation describes one‑way TLS between the runtime and MCP data plane. The data plane trusts requests from the Message Processor and does not independently authenticate every caller at that hop.

Google therefore recommends restricting TCP 443 ingress to workloads labelled app=apigee‑runtime. Without that boundary, another pod that can reach the service could enter a path the component expects to receive only from the runtime.

Apply and test the network policy before production exposure. Verify both the intended runtime path and a denied request from an unrelated pod.

Rollout scope and published limits can cause visible failures

MCP must be enabled consistently for environments in the same environment group. A mixed configuration can return HTTP 503 during routing. Google recommends a staged rollout, but the unit of consistency still matters when planning a canary.

The Apigee MCP overview lists a limit of 1,000 tools per organization and supports OpenAPI 3.0.0 through 3.0.3. Tool discovery and execution also inherit the API proxy’s authentication, quota and policy behavior.

Inventory operations before enabling discovery. Publishing every endpoint as a tool can create an unusable catalog and a larger permission surface.

Acceptance should test a real call and the denied paths

Start with one bounded API proxy and a minimal set of operations. Confirm tools/list, call a non‑destructive operation, trace the request through the runtime and verify the result uses the intended credentials and quota policy.

Then test an unauthorized tool call, an unrelated pod, an inconsistent environment‑group rollout and a data‑plane replica restart. Record the cluster, chart versions and exact exposed operations. Client‑side MCP startup controls remain a separate concern, as shown in GitHub Copilot’s JetBrains controls.

Image: Real screenshot of Google Cloud’s official Apigee MCP documentation. OpenTools rejected the generated promotional blog artwork and captured the documentation without generative alteration or artificial upscaling.

Sources

1.announced MCP support in Apigee Hybrid 1.17.0 (developers.googleblog.com)
2.docs.cloud.google.com (docs.cloud.google.com)
3.docs.cloud.google.com (docs.cloud.google.com)

Tags

Google CloudApigee HybridModel Context ProtocolKubernetesAPI management