Microsoft Adds Model Context Protocol to Windows for AI Agents

Microsoft is adding native support for the Model Context Protocol (MCP) in Windows, laying the foundation for a future where AI agents act as integral parts of the operating system.

MCP, sometimes called the “USB-C of AI apps,” is an open standard developed by Anthropic that allows AI agents to interact more easily with apps, services, and now, core Windows components. Microsoft’s adoption of the protocol—announced alongside the new Windows AI Foundry platform—signals a major step in its effort to transform Windows into an operating system designed for intelligent, agent-based workflows.

A New Interface Layer for AI Agents

Just as USB-C standardized how devices physically connect, MCP aims to standardize how AI apps communicate with digital environments. With MCP, developers can enable their AI agents to query system functions, access files, or interact with applications—all without custom integrations for each use case.

“We want Windows as a platform to be able to evolve to a place where we think agents are a part of the workload on the operating system,” said Windows chief Pavan Davuluri. “Agents are a part of how customers interact with their apps and devices on an ongoing basis.”

To support this, Microsoft is introducing new developer capabilities and a secure MCP registry for Windows. The registry acts as a trusted directory where agents can discover installed MCP servers and connect to available capabilities—such as the Windows File System, windowing layers, or the Windows Subsystem for Linux.

In one early demo, Microsoft showed how the Perplexity AI app could use MCP to access files directly via natural language—querying a file system MCP server to retrieve documents based on context, like “find all the files related to my vacation in my documents folder,” without manually navigating folders.

Microsoft is also beginning to integrate AI agents into the Windows user experience more directly. Copilot Plus PCs will soon feature an AI agent settings interface, allowing users to control system settings through natural language. This reinforces Microsoft’s broader vision of agents not just as assistants, but as a new layer of interaction within the OS.

Balancing AI Power with Security

While the functionality promises more intuitive and connected AI tools, it also introduces new security concerns. MCP has already drawn scrutiny for its potential exposure to token theft, prompt injection, and server compromises.

Microsoft is responding cautiously, limiting initial access to a developer preview and implementing safeguards. Users will be prompted when apps request MCP access, similar to location permissions in web apps.

“We’re going to put security first,” said David Weston, Microsoft’s VP of enterprise and OS security. “Ultimately we’re considering large language models as untrusted, as they can be trained on untrusted data and they can have cross-prompt injection.”

Weston added that Microsoft is focused on avoiding overbearing user interface friction, referencing past missteps like Windows Vista’s UAC prompts and current frustrations with permissions. “We expect to have a full-featured set of controls there that’ll hit that sweet spot,” he said.

MCP servers will also need to meet new security standards in order to appear in Microsoft’s official registry—more details on those requirements will arrive with the full developer preview.

Introducing the Windows AI Foundry

Alongside MCP, Microsoft also announced the Windows AI Foundry, a rebranded platform that connects developers to local and cloud-based AI models. The Foundry will support models from Foundry Local, Nvidia NIMs, Ollama, and others, giving developers access to powerful tools on Copilot Plus PCs.

Using Windows ML, developers can integrate these models into apps without needing to package runtimes or hardware drivers themselves. Microsoft says this should simplify deployment across a growing landscape of AI-capable Windows devices.

The company is working closely with AMD, Intel, Nvidia, and Qualcomm to optimize performance across chipsets.

What This Means

By embracing MCP and introducing the Windows AI Foundry, Microsoft is preparing its OS for a world where AI agents are not just tools—but co-pilots. These changes mark a shift in how developers will build and connect AI apps to system functions, and how users will interact with Windows itself.

If Microsoft can strike the right balance between capability and control, Windows could become a powerful environment for a new generation of AI-powered experiences—more connected, more conversational, and more secure.

Editor’s Note: This article was created by Alicia Shapiro, CMO of AiNews.com, with writing, image, and idea-generation support from ChatGPT, an AI assistant. However, the final perspective and editorial choices are solely Alicia Shapiro’s. Special thanks to ChatGPT for assistance with research and editorial support in crafting this article.