D2.6 · Domain 2 · Tool Design + Integration · 18% of CCA-F

Built-In Tools vs Custom Tools vs Skills vs MCP.

5 min read·9 sections·Tier A

Built-in tools, custom tools, Agent Skills, and MCP servers are complementary layers, not a power ranking — one agent often uses several at once. Match each capability to complexity, reusability, governance, and latency — not to raw capability. The exam trap is defaulting to MCP because it sounds the most powerful. Anthropic: skills-explained

Official Anthropic guidanceDomain 2CCA-F + CCD-F
Built-In Tools vs Custom Tools vs Skills vs MCP, hero illustration featuring Loop mascot in a warm gallery scene.
Domain D2Tool Design + Integration · 18%
On this page
01 · Summary

TLDR

Built-in tools, custom tools, Agent Skills, and MCP servers are complementary layers, not a power ranking — one agent often uses several at once. Match each capability to complexity, reusability, governance, and latency — not to raw capability. The exam trap is defaulting to MCP because it sounds the most powerful. Anthropic: skills-explained

4
Mechanisms
D2
Exam domain
CCD-F D8
Also tested in
4
Selection axes
Built-in
Cheapest option
02 · Definition

What it is

Architects extending what Claude can do choose among four distinct mechanisms, each with a different trade-off of setup cost, reusability, and scope. Built-in tools are platform-provided (Read, Write, Edit, Bash, Grep, Glob, web search) — zero setup, zero maintenance. Custom tools are hand-written functions or API calls you define, typically served through an in-process MCP server in the Agent SDK. Agent Skills package instructions plus optional scripts and resources that Claude loads automatically when relevant. MCP servers expose external systems as tools over a standard protocol, callable locally or remotely.

Anthropic explicitly positions these as complementary layers in the same stack rather than competing options. The architect's job is fit-for-purpose selection: the same agent often uses built-in tools for file work, a custom tool for one private API, a Skill for a repeatable procedure, and MCP for org-wide integrations — all at once.

03 · Mechanics

How it works

Built-in first. Reach for platform tools for straightforward, native, well-defined tasks — they are the fastest path with no external setup and no maintenance overhead. A file-editing agent that reinvents Read/Write/Edit is over-building.

Applying built-ins effectively. Within the built-in set, match the tool to the operation: `Read` for a known file path, `Grep` to search file *contents* by pattern, `Glob` to find files by *path* pattern, `Bash` for shell commands and anything without a first-class tool, and `Edit` for a targeted in-place change versus `Write` for a full-file replace. The exam rewards NOT dropping to Bash (e.g. grep/cat/ls) when a dedicated tool exists — first-class tools are more reliable, cheaper to reason about, and easier to permission.

Custom tools for private, one-off access. When you need a proprietary API or internal service no built-in covers, define a custom tool via the Agent SDK's in-process MCP server so Claude can call your functions directly. Running in-process avoids the IPC/round-trip of an external server, so latency is typically lower for a single private call.

Skills for reusable, multi-step procedures. A Skill is the right unit when a capability is a stateful, orchestrated workflow you want Claude to invoke automatically and reuse across sessions — not a single function call. A Skill can itself call custom tools or MCP servers for its steps, so it composes with the other layers rather than replacing them. Constraint: API Agent Skills run via code execution, which is excluded from Zero Data Retention — a ZDR-required flow can't rely on them (this is about API Agent Skills; Claude Code skill files are a separate surface with their own ZDR rules).

MCP when you connect external systems. Prefer an MCP server when the job is integrating outside services and you want one shared, governable integration point across a team rather than a bespoke per-app function. Note the setup asymmetry: consuming a pre-built MCP server is a one-line `.mcp.json` entry; authoring your own is the higher-effort path. MCP is a protocol — the centralized auth, audit, and versioning are governance *you build on it*, not automatic.

Anthropic teaches this as a live refactoring skill. A Code w/ Claude 2026 session frames it as "tool, skill, or subagent?" — decomposing an agent whose logic has outgrown its prompt, categorizing each capability, and running evals after each change to confirm the split didn't regress behavior. The decision is iterative, not a one-time pick.

Built-In Tools vs Custom Tools vs Skills vs MCP mechanics, painterly diagram featuring Loop mascot.
04 · In production

Where you'll see it

Coding agent

Built-in Read/Write/Edit/Grep for file work; a custom tool for one internal deploy API; no MCP needed.

Enterprise assistant

MCP servers front Jira + Slack + the warehouse so one auth + audit layer governs every external call.

05 · Compare

Side-by-side

MechanismBest forSetup / maintenanceReusabilityGovernance / retention
Built-in toolNative file / shell / search opsNonePlatform-providedPlatform-managed
Custom toolOne private function or APILow (in-process MCP)Per-appYou own the code
Agent SkillReusable multi-step procedureMediumAcross sessions / teamsYou own it; API skills excluded from ZDR
MCP serverConnecting external systemsConsume: low (.mcp.json) · author: highPer-server, sharableWhatever auth / audit you build on it
06 · When to use

Decision tree

01

Does a built-in already do it?

YesUse the built-in (pick the right one — Read/Grep/Glob/Bash/Edit/Write) — done.
NoKeep going — the layers below can combine.
02

Do you need a private function or API no built-in reaches?

YesAdd a custom tool (in-process = typically lowest latency).
NoSkip to the procedure + connectivity questions.
03

Is it a reusable, multi-step procedure?

YesPackage it as an Agent Skill — which can still CALL custom tools or MCP for its steps (mind ZDR for API skills).
NoA single tool is enough.
04

Are you connecting external systems or want one shared, governed integration point?

YesUse an MCP server (consume = a .mcp.json line; author = more work). Skill + MCP together is common — procedure plus connectivity.
NoBuilt-in or custom tool covers it.
07 · Per certification

How each cert tests this

CCA-F

Architect (D2 · Tool Design + Integration): tests fit-for-purpose SELECTION at solution-design altitude — which layer suits a system's reusability + governance needs — AND effective use of the individual built-ins (Read vs Grep vs Glob vs Bash vs Edit/Write).

CCD-F

Developer (D8 · Tools & MCPs): tests the concrete tradeoff — a custom tool via the Agent SDK's in-process MCP vs. consuming or authoring an external MCP server — and when to compose a Skill with tools/MCP rather than picking one.

08 · On the exam

Question patterns

Built-In Tools vs Custom Tools vs Skills vs MCP exam trap, painterly cautionary scene featuring Loop mascot.
A file-editing coding agent needs to read, search, and modify files in a repo. What should it use?
Built-in tools (Read/Write/Edit/Grep/Glob/Bash). The tempting distractor is "an MCP filesystem server for consistency" — but built-ins already cover native file work at zero setup. MCP here adds overhead with no benefit.
You need Claude to look up a customer by ID against one internal database, used only by this app. Which mechanism?
A custom tool served through the Agent SDK's in-process MCP server. The distractor is "a Skill" — but this is a single function call, not a reusable multi-step procedure, so a Skill over-packages it.
A recurring 'generate a compliant invoice PDF' procedure bundles a template, formatting rules, and a script. Best fit?
An Agent Skill — it packages instructions + resources Claude loads automatically and reuses across sessions. The distractor "a custom tool" misses that this is a stateful, multi-step procedure, not one function.
You must connect Claude to Jira, Slack, and a data warehouse across the whole org, and you want one shared, auditable integration point. Which mechanism?
MCP servers — the fit for integrating multiple external systems behind one governable surface. The distractor "one big custom tool per system" duplicates integration work and skips the shared auth/audit layer. (MCP does not *auto*-provide governance — you build the auth/audit on it — but it is the layer designed for it.)
A regulated deployment requires Zero Data Retention. Your team wants to ship a reusable multi-step procedure as an API Agent Skill. What's the catch?
API Agent Skills run via code execution, which is excluded from ZDR — so a ZDR-required flow can't rely on them. The exam rewards knowing this scoped constraint (it's about API Agent Skills, not Claude Code skill files); the fix is a custom-tool/MCP path, not a Skill.
A recurring workflow must 'triage new Jira tickets and post a summary to Slack' — a repeatable procedure that also needs live Jira + Slack access. One mechanism, or more?
Compose them: an Agent Skill for the repeatable procedure, calling MCP servers (or custom tools) for the Jira/Slack connectivity. The trap answer is "a Skill" OR "MCP" alone — treating them as either/or. They are complementary layers: procedure + connectivity.
09 · FAQ

Frequently asked

Is MCP always better than a custom tool?
No. An in-process custom tool typically has lower latency for a single private call; MCP earns its keep when you're connecting external systems or want a shared, governed integration point across a team.
Do Skills break Zero Data Retention?
API Agent Skills execute via code execution, which ZDR excludes — so a ZDR-required flow can't rely on them. This is scoped to API Agent Skills; Claude Code skill files are a separate surface with their own ZDR rules.
10 · Practice with AI

Work this with your AI

Work this concept hands-on with Claude Code, Codex, or claude.ai. Copy a prompt, paste it into your assistant, and practise in tandem. Each one keeps you active (explain it back, get drilled, or build) rather than just reading.

  • Drill it like the exam (scenario MCQs)
    Practice in the exam's scenario-MCQ format with trap awareness.
  • Explain it back (Feynman)
    Build durable, transferable understanding of a concept you can half-state.
  • Test me, adapting the difficulty
    Active recall practice on a concept you think you know.
  • Check my prerequisites first
    Before studying a concept that keeps not sticking.
  • Find the high-leverage 20%
    When a domain feels too big and you are short on time.
Self-check

Test yourself

Three diagnostic questions on this primitive. Reveal each answer when you have a guess. Want a full 60-question mock? Open the mock hub →

Q1A file-editing coding agent needs to read, search, and modify files in a repo. What should it use?
Built-in tools (Read/Write/Edit/Grep/Glob/Bash). The tempting distractor is "an MCP filesystem server for consistency" — but built-ins already cover native file work at zero setup. MCP here adds overhead with no benefit.
Q2You need Claude to look up a customer by ID against one internal database, used only by this app. Which mechanism?
A custom tool served through the Agent SDK's in-process MCP server. The distractor is "a Skill" — but this is a single function call, not a reusable multi-step procedure, so a Skill over-packages it.
Q3A recurring 'generate a compliant invoice PDF' procedure bundles a template, formatting rules, and a script. Best fit?
An Agent Skill — it packages instructions + resources Claude loads automatically and reuses across sessions. The distractor "a custom tool" misses that this is a stateful, multi-step procedure, not one function.
Last reviewed: 2026-05-04·Refresh cadence: monthly
D2.6 · D2 · Tool Design + Integration

Built-In Tools vs Custom Tools vs Skills vs MCP, complete.

You've covered the full ten-section breakdown for this primitive, definition, mechanics, code, false positives, comparison, decision tree, exam patterns, and FAQ. One technical primitive down on the path to CCA-F.

More platforms →