Native MCP Rollout for Rocky Teams
MCP can make Rocky more useful by exposing specialized tools. Roll it out like production integration work: scoped, tested, documented, and reversible.
Official Hermes Agent docs: https://hermes-agent.nousresearch.com/docs/user-guide/features/mcp
Rollout checklist
- Identify the workflow the MCP server improves before adding it.
- Prefer least-privilege credentials and avoid sharing broad admin tokens.
- Test the server connection with a harmless read-only request first.
- Configure only the tools that are needed for the workflow.
- Record fallback steps if the MCP server is down.
Operational standards
- Name servers clearly so future agents understand what they are calling.
- Keep local stdio servers separate from remote HTTP servers in documentation.
- Do not publish MCP configuration snippets that contain tokens or host-private details.
- After changing MCP configuration, restart or reload according to the docs.
- Include MCP behavior in the task’s verification path.
Pitfalls
- Adding an MCP server because it is available, not because the workflow needs it.
- Giving an unattended job write-capable MCP tools without a narrow scope.
- Confusing a successful connection test with end-to-end workflow success.
- Letting tool names collide or become ambiguous.
Verification steps
- Run a connection or list-tools check.
- Exercise one safe tool call in the target workflow.
- Confirm error messages are understandable when credentials are missing.
- Document exactly which tools are enabled.
