Adding MCP to a SaaS: Where Human Judgment Still Matters

A developer building PontoBarato, a Brazilian employee time-tracking SaaS, added a Model Context Protocol (MCP) interface for AI assistants. The challenge wasn't technical but designing boundaries: ensuring tenant isolation, using narrow tools instead of generic ones, and differentiating read vs. write operations. The experience shows that AI speeds implementation but cannot replace human decisions on trust and security design.