Who Created MCP and Agent Skills—and Who Implements Them Better?

This comparison asks whether protocol authorship, standards adoption, and interoperability in daily agent work. The useful answer is not a permanent winner but a boundary, cost, or workflow effect a team can reproduce.

The claim, stated precisely

The pasted point says Codex adopted open formats while Anthropic created the MCP and Agent Skills ecosystem. Anthropic did originate MCP and published Agent Skills as an open approach, so authorship is relevant history. It does not establish that every Anthropic implementation is superior or that later adopters are peripheral. Standards succeed through interoperable implementations.

The comparison underneath “Who Created MCP and Agent Skills—and Who Implements Them Better?”

Feature tables are snapshots of packaging, not permanent laws. A native capability may also be available through a tool protocol; an absent button may hide a perfectly good command-line route. Native support still matters because it changes setup, credential handling, provenance, failure reporting, and who can use the feature without building an integration. The distinction is operational, not semantic.

For capability claims, write down the exact surface and version. Chat, desktop, editor, CLI, API, and cloud task runners from the same vendor do not necessarily share tools or permission models. Test the route your team will deploy. A claim about the consumer chat product is not automatically a claim about the coding agent, and a claim about a plugin is not the same as a built-in feature with first-party support.

The useful axis here is protocol authorship, standards adoption, and interoperability in daily agent work. That wording is deliberate. It turns a product label into something a team can observe. Instead of asking which agent is generally better, ask what changes in the repository, the operator's workload, and the evidence available for review when this one design choice is different.

Keep model quality separate from product behaviour. The model can change while the harness remains familiar, and the harness can gain a new surface without the model changing. A comparison that attributes every outcome to “Codex” or “Claude” usually bundles model, prompt, repository state, permissions, tools, and operator skill into one word. That is convenient for a headline and useless for a policy.

How the Codex side behaves

Codex supports MCP-style external tools and Agent Skills concepts within its own rules, plugin, and task environment. Adoption can broaden the ecosystem and let teams reuse capability packages. Product-specific permissions, resource handling, or UI may still make a nominally portable server behave differently.

The practical question is what the Codex route makes easy by default and what it makes explicit. Defaults determine the common case. Explicit boundaries determine whether an unusual task stops for review or quietly inherits more authority than the brief required. Inspect the surface you actually use: app, editor, CLI, cloud task, or API. They belong to one product family, but they are not interchangeable execution environments.

Also separate capability from availability. Account tier, workspace policy, platform, and release channel can change what a user sees. If a feature is decisive, verify it on the account that will do the work and record the date. A screenshot from another tier is not a procurement specification.

How the Claude Code side behaves

Anthropic's role in creating MCP gives Claude Code a native conceptual fit with its server, tool, resource, and prompt model. Claude Code's skills and hooks can compose around that ecosystem. First-party origin does not remove ordinary risks: tool descriptions are untrusted input, servers hold credentials, and transports create new boundaries.

Claude Code's terminal-centred design makes the surrounding machine unusually important. Shell configuration, installed commands, repository hooks, credentials, and local policy all become part of the agent system. That can be a strength because the tool fits an existing engineering environment. It can also make two developers' nominally identical installations behave differently.

Judge integrations by their failure mode. Ask what happens when a hook exits non-zero, a tool is missing, a permission prompt is ignored, or a plugin returns untrusted text. A feature list describes the successful path. Production use is defined by the path that fails at 4:45 on a Friday.

A repository where the difference becomes visible

Connect the same issue tracker, design system, and database schema server to both clients. A successful demo is insufficient. Compare authentication, permission prompts, pagination, errors, long responses, resource links, and how each client handles a malicious tool description. Port one skill without editing its core instructions.

This example matters because it creates an observable consequence rather than a preference. The operator either has to intervene, the agent either leaves a trace, and the repository either reaches the acceptance test. Those events can be counted. If the comparison cannot be expressed in an event a reviewer can see, it is probably still marketing language.

The failure mode on both sides

Standards fail through lowest-common-denominator thinking and extension creep. A server may technically connect while relying on one client's undocumented behaviour. Skills can carry assumptions about paths, tools, or artifact formats that make portability nominal. Protocol support can also become a blanket trust signal it was never meant to provide.

Every advantage has a shadow. Automation reduces attention until it automates the wrong assumption. Safety prompts preserve control until repetition trains the user to approve without reading. Parallelism cuts elapsed time until reconciliation becomes the work. Local access removes setup until ambient credentials become invisible inputs. The correct comparison names the shadow before recommending the feature.

That is why the winner can reverse by team. A solo developer who knows every shell alias has a different risk profile from a regulated team running unattended tasks. A mature monorepo with deterministic checks rewards autonomy. A fragile legacy tree with undocumented release steps rewards frequent, cheap interruption. Neither result generalises beyond the conditions that produced it.

How to test this difference in your own repository

Build a conformance matrix from operations the team actually uses. Run identical calls, failure injections, and permission scenarios on both products. Record what is standard, what is a vendor extension, and what requires adaptation. Include server upgrade and credential rotation, because installation is the easy part.

1. Start both runs from the same commit and remove generated files from the first attempt.
2. Use the same acceptance criteria, not merely the same conversational prompt.
3. Choose the model and account tier you would actually deploy, then write them beside the result.
4. Record elapsed time, active human time, tool calls, permission decisions, retries, changed lines, and tests executed.
5. Review blind where possible. A reviewer should judge the patch and evidence before learning which agent produced it.
6. Repeat at least three times. One lucky hypothesis is not a product property.
7. Keep the worst run. Tail behaviour is where agent policies are tested.

Do not force a single score. A run can be faster and harder to review, safer and more interruptive, cheaper and less complete. Preserve the vector of results until the team has stated which constraint matters. Weighted scores conceal disagreement by turning policy choices into arithmetic.

Reading the transcript without fooling yourself

A long transcript is not evidence of deep reasoning, and a short transcript is not evidence of efficiency. Look for decisions that changed the patch: files selected, assumptions tested, permissions broadened, tests added, failures diagnosed, and work discarded. Everything else may be useful communication, but it should not drive the technical comparison.

Tool-call counts need the same caution. One broad command can do the work of twenty narrow reads while exposing more data and making review harder. Twenty calls may show careful scoping or repeated confusion. Pair the count with intent and outcome. The question is whether each call reduced uncertainty that mattered to acceptance.

Likewise, count corrections initiated by the human. They are a form of active labour that product benchmarks often omit. A system that finishes in ten minutes after six interventions did not save the same kind of time as one that finishes in fifteen minutes unattended. Which is preferable depends on whether those interventions were valuable design collaboration or avoidable steering.

When this point should decide the purchase

Value authorship for clarity and ecosystem direction, but buy on current interoperability, safety, and maintenance. Prefer portable servers and skills whose dependencies are explicit. Avoid tying critical workflows to an extension unless its benefit justifies the exit cost and the team tests both client and server upgrades.

Make this point decisive only if it appears frequently in representative work and the cost of the worse behaviour is material. A dramatic feature used once a quarter should not outweigh the ordinary edit-review-test loop. Conversely, a boundary that prevents a rare but catastrophic credential or deployment error deserves more weight than its frequency suggests.

Write the decision as a conditional: “For repositories with these controls, this team prefers this surface because this measured outcome improved.” Conditional decisions age well. Universal rankings become stale the moment either vendor changes a default.

What could invalidate this article

A new release can move this capability between surfaces, change a default, add a permission scope, alter plan availability, or expose a first-party integration. The article would then describe history rather than the current product. A model update can also change observed speed or code quality without changing the surrounding workflow. Re-run the test after material releases and before renewing a large contract.

Documentation is necessary but insufficient. It establishes supported behaviour; it does not establish comparative speed, output concision, code quality, or cost to completion in your repository. Those claims require measurements. Where the original thirty-point list used a percentage, multiplier, or absolute count, this series treats it as a benchmark hypothesis unless a current primary source guarantees it.

Turn the comparison into a policy

A useful evaluation ends with a routing rule. Name the task conditions, the preferred surface, the evidence required before acceptance, and the condition that forces escalation. For this difference, the rule should mention protocol authorship, standards adoption, and interoperability in daily agent work in plain language that a new team member can apply without knowing the history of the tool comparison. Put the rule beside the repository instructions or engineering handbook, not in a purchasing slide that disappears after rollout.

Give the policy an owner and an expiry date. Product defaults change, account tiers move, and the team's own repository matures. A decision that was correct when checks were weak may become unnecessary after CI improves; a permissive workflow that was safe for a prototype may become unacceptable after production credentials arrive. Re-test the representative task rather than debating release notes in the abstract.

Finally, preserve a second route. A team that standardises on one agent still needs an exception for tasks the chosen environment cannot reproduce, a model outage, a provider limit, or an investigation that benefits from an independent implementation. The goal of comparison is dependable delivery, not loyalty. “Who Created MCP and Agent Skills—and Who Implements Them Better?” should produce a default and an escape hatch, with both narrower than giving every tool every form of authority for every task.

Bottom line

Who Created MCP and Agent Skills—and Who Implements Them Better? is a useful difference only after it is reduced to protocol authorship, standards adoption, and interoperability in daily agent work and tested on the surface your team will actually use. The product names tell you where to look today; they do not supply the complete durable answer for your repository. Preserve the context, measure accepted work, and expect the conclusion to change as the tools do.

That discipline is the comparison this publication is meant to support.