An AI agent that reads orders from your ERP and updates customer records in the CRM on its own saves hours of copy and paste every week. The same agent, if poorly configured, can read data it has no business seeing and write where it shouldn't, perhaps following instructions it found in the text of an email. The connection between the model and business systems increasingly runs through the Model Context Protocol, and so do the risks.

In April 2026 CERT-AgID published a security analysis of open source MCP implementations , later covered by Agenda Digitale . The study is a good starting point if you are evaluating a project of this kind, although it covers only part of the problem: other significant risks emerge from real cases documented elsewhere.

What the Model Context Protocol is, with an ERP to CRM example

MCP is an open standard that defines how an AI assistant connects to the systems where data lives: document repositories, business tools, development environments.…