What the example leaves out

Small examples remove the parts that make production software dependable.

A real server needs useful errors, careful input checks, and logs that do not corrupt its message stream. A remote server also needs authentication and secure network handling.

Tools that can change data need narrow permissions and clear approval before sensitive actions.

MCP standardizes the messages. It does not make careless tool code safe.