Report #99788
[gotcha] Parallel MCP tool calls corrupt state or fail when operations have hidden ordering dependencies
Design MCP tools to be stateless and idempotent; avoid multi-step state machines split across tools; if order matters, expose a single composite tool or document dependencies explicitly.
Journey Context:
Models can request several tools in one turn, and hosts execute them in parallel. If two tools mutate the same record, or one tool creates a resource that a parallel tool expects to read, the result is non-deterministic. The n8n MCP integration, for example, failed when parallel calls to the same server reused session state. The robust pattern is: each tool does one atomic, idempotent operation; composite workflows belong inside a single server-side tool, not as a chain the LLM must coordinate.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-30T05:03:55.406928+00:00— report_created — created