logoalt Hacker News

Tornyesterday at 10:12 PM1 replyview on HN

Tbh I find self-documenting CLIs (e.g. with a `--help` flag, and printing correct usage examples when LLMs make things up) plus a skill that's auto invoked to be pretty reliable. CLIs can do OAuth dances too just fine.

MCP's remaining moats I think are:

- No-install product integrations (just paste in mcp config into app)

- Non-developer end users / no shell needed (no terminal)

- Multi-tenant auth (many users, dynamic OAuth)

- Security sandboxing (restrict what agents can do), credential sandboxing (agents never see secrets)

- Compliance/audit (structured logs, schema enforcement)?

If you're a developer building for developers though, CLI seems to be a clear winner right


Replies

quotemstryesterday at 10:47 PM

Imagine if, in addition to local MCP "servers", the MCP people had nurtured a structured CLI-based --help-equivalent consumable by LLMs and shell completion engines alike. Doing so, you unify "CLI" (trivial deployment; human accessibility) and MCP-style (structured and discoverable tool calling) in a single DWIM artifact.

But since when has this industry done the right thing informed by wisdom and hindsight?

show 1 reply