From my experience, the biggest flaw of mcp is lack of control over your system prompt.
Prompts need to be tailored for specific model (duh). Tool definitions are de facto part of your system prompt. By injecting tool definition from MCP servers into your prompt, you are basically adding prompt that was (likely) not tailored for your specific model. That causes drop in quality of answers.
Other issue is that adding one new feature via MCP can introduce regression into your system and cause other MCP features to work incorrectly (and I am not talking about malicious prompt injection by MCP provider).
Real life example: tools from MCP server for ms outlook requires certain date format for filtering emails. That worked fine in our prod. Until we added another MCP server (built in-house in another department of our company) that required dates in different format. After adding these tools, now our agent started making mistakes: putting dates in outlook format in our internal mcp tool and vice versa - putting dates in our internal format into outlook tool. There is no obvious way to fix it other than separating these prompts. And that goes against standard MCP architecture and consumes way more tokens to cycle through multiple prompts and agents.
If that's already the issue with two MCP servers, then this architecture clearly does not scale.
I remember when I was 12yo, I used to create a lot of small fan pages, blogs and forums (with total of 10 users if I was lucky). They were always indexed by Google with no problem. I miss these simpler times. Nowadays, Internet is no longer democratic.