- An agent reviewing the button sees it’s a safe, scoped Slack post — no re-discovery of the MCP server required
- A deterministic workflow (drawer, cron, webhook) can press it without involving an LLM at all — the MCP call is already parameterized and approved
Why this matters
Without MCP buttons, every agent session has to rediscover the same tools: list servers, list tools, read schemas, guess parameters, verify the call. MCP buttons turn that one-time exploration into a reusable asset.What’s changing when MCP buttons land
--mcp '<server>://<tool>'flag naming the MCP server and tool--mcp-arg key=valuefor static parameters;--argfor dynamic ones bound at press time- Runtime value
mcpinbutton.json - Connection details resolved via the same credential system as SQL buttons (register an MCP server once, reference by name)
- Press returns the tool’s structured response, same JSON envelope as every other button