Stand up the simplest MCP server a Claude Desktop host can connect to: one synchronous tool, say a filesystem read. The host lists tools, the model picks one, the server runs it and returns the result. No auth, no streaming, no multi-tenancy yet. The catch even at this size: the tool descriptions you advertise are read by the model to choose the tool, and the result you return lands back in its context window.