Training course · Model Context Protocol (MCP) · Java & Spring

Model Context Protocol (MCP) for Java and Spring Developers

Build and connect MCP servers securely: tools, resources and prompts for Claude Code, Cursor, Copilot and your own AI agents.

Duration
2 days (14 hrs)
Format
Online or on-site
Language
German or English
Participants
open dates or exclusive for your team
Certificate
Certificate of attendance

Overview

“Model Context Protocol (MCP) for Java and Spring Developers” is a hands-on course for roles such as Java back-end developers using Spring Boot or Jakarta EE, Teams modernising legacy Java applications and Software architects for enterprise and microservice landscapes. Rather than learning Model Context Protocol (MCP) in the abstract, you work on tasks from your daily routine – with examples, exercises and templates from Java & Spring.

The Model Context Protocol is an open standard that gives AI applications a uniform way to access external tools, data sources and workflows. Instead of building separate integrations for every assistant, you implement an MCP server once and use it in Claude Code, Claude Desktop, Cursor, GitHub Copilot, VS Code and your own agents. In this two-day course you learn the host, client and server architecture, the three core primitives of tools, resources and prompts, and the stdio and Streamable HTTP transports, applying each of them directly in your own code.

On day one you use the official TypeScript or Python SDK to build an MCP server that exposes internal APIs, databases or files to AI assistants in a controlled way, and you test it with the MCP Inspector. Day two covers remote servers, OAuth-based authorisation, security risks such as prompt injection and tool poisoning, and operations, logging and governance in an enterprise setting. You learn to write tool descriptions that models use reliably, and you leave knowing how to integrate MCP servers safely into your development and agent landscape.

Java and Spring carry business-critical systems in many organisations: banking back ends, ERP integrations, public-sector applications and large microservice estates. These systems have often grown over many years, and modernisation never stops. AI coding assistants and agents change the heaviest routine work in particular: major Spring Boot upgrades including the javax-to-jakarta switch, JUnit and Mockito tests for poorly covered code, refactorings towards records and modern language features, and analysis of stack traces and Hibernate issues. Clear guardrails are essential: build tool, module structure, architecture rules and test strategy all need to be in context. This course shows you how to use agents productively and in a controlled way in Maven or Gradle projects.

The course is delivered live – either online in a virtual classroom or on-site in our training rooms in Munich, Salzburg, Berlin, Augsburg, Hanover, Bremen, Stuttgart and Kaiserslautern. We can also run it exclusively for your team.

Who is this course for?

  • Java back-end developers using Spring Boot or Jakarta EE
  • Teams modernising legacy Java applications
  • Software architects for enterprise and microservice landscapes
  • Developers in banking, insurance and the public sector
  • Tech leads responsible for upgrades and technical debt

Typical challenges we address

  • Laborious framework and JDK upgrades with numerous breaking changes
  • Large legacy codebases with low test coverage and tight coupling
  • Hard-to-analyse performance issues in JPA, Hibernate and transactions
  • Heavy boilerplate in configuration, mapping and interface code

What you will be able to do

  • You explain the MCP architecture and choose between tools, resources and prompts for each use case.
  • You develop your own MCP server in TypeScript or Python and test it systematically.
  • You connect MCP servers to Claude Code, Cursor, Copilot and custom agents.
  • You run remote servers using Streamable HTTP and OAuth-based authorisation.
  • Use AI agents for Spring Boot upgrades, refactorings and test generation in Maven and Gradle projects.
  • Diagnose Hibernate, performance and production issues faster with AI support.
  • Embed architecture rules and quality standards so that generated Java code adheres to them reliably.

Course outline

Day 1

Module 1 Architecture and core concepts
  • Roles of host, client and server and the lifecycle of a connection
  • JSON-RPC messages, capability negotiation and notifications
  • Tools, resources and prompts: choosing the right primitive
  • Client features such as sampling, roots and elicitation at a glance
Module 2 Building your own MCP server
  • Setting up a server with the official TypeScript or Python SDK
  • Defining tools cleanly with JSON Schema for inputs and outputs
  • Exposing resources and resource templates for documents, records and configuration
  • Testing and debugging with the MCP Inspector and meaningful error messages
Module 3 Connecting to Claude Code, Cursor, Copilot and agents
  • Configuring local stdio servers and remote servers in clients
  • Project-level and user-level configuration, approvals and permissions
  • Writing tool descriptions that models reliably select correctly
  • Integrating MCP servers into custom agents built with the Claude Agent SDK or OpenAI Agents SDK
Module 4 Transport, authorisation and operations
  • Streamable HTTP, session management and stateless servers
  • OAuth-based authorisation, token validation and integration with existing identity providers
  • Deploying as containers, on serverless platforms or behind a gateway
  • Logging, monitoring, rate limiting and versioning tool interfaces

Day 2

Module 5 Security and governance
  • Threats: prompt injection via tool results, tool poisoning, confused deputy
  • Least privilege, confirmation requirements and sandboxing
  • Reviewing and approving third-party servers within the organisation
  • Data protection, logging of personal data and requirements under GDPR and the EU AI Act
Module 6 Practice lab: Java & Spring
  • Driving a Spring Boot upgrade
  • Generating JUnit and Mockito tests
  • Refactoring legacy code
  • Analysing JPA and Hibernate issues
  • REST APIs and interfaces
  • Making sense of stack traces and production errors
Module 7 Data protection, quality & transfer to daily work
  • Java systems often run in regulated sectors: agree with information security and data protection which code may be sent to external models, and take requirements such as DORA, NIS2 or national banking IT rules into account. Generated code and new Maven dependencies should be checked for licences and known vulnerabilities and recorded in an SBOM.
  • Ground rules for safe AI use in your team
  • Checking results: facts, sources, tests and the four-eyes principle
  • Personal action plan for the next 30 days
  • Open questions, outlook and resources for further learning

Practical scenarios from your field

Driving a Spring Boot upgrade

The agent analyses dependencies, applies OpenRewrite recipes, switches javax packages to jakarta, adapts deprecated configuration and security setups and iterates over build and tests until the application is green again.

Generating JUnit and Mockito tests

Services and controllers get unit tests with JUnit and Mockito plus slice tests using WebMvcTest or DataJpaTest. The AI deliberately raises coverage on critical paths and documents test assumptions.

Refactoring legacy code

Large classes are split up, DTOs turned into records, null checks replaced with Optional and streams used where they help. Existing tests safeguard behaviour at every step.

Analysing JPA and Hibernate issues

The AI reads SQL logs and stack traces, spots N+1 queries, LazyInitializationExceptions and poor fetch strategies, and proposes entity graphs, projections or index changes. Each optimisation is backed by SQL logs.

REST APIs and interfaces

OpenAPI specifications are turned into controllers, DTOs, MapStruct mappers and Bean Validation, complete with consistent error handling via ControllerAdvice and integration tests. Existing package and naming conventions are respected.

Making sense of stack traces and production errors

Long stack traces, thread dumps and log excerpts are summarised, the likely root cause is narrowed down and a reproducing test case plus fix is proposed.

Possible hands-on projects

Spring Boot microservice

A REST service with Spring Data JPA, Flyway migrations, Bean Validation, Actuator endpoints and Testcontainers tests, developed entirely by an AI agent from a specification.

Dependency report for Maven and Gradle

A command-line tool that analyses build files, lists outdated and vulnerable libraries and describes upgrade paths along with expected breaking changes.

Architecture rule checks

An ArchUnit test suite that automatically enforces your project’s layering rules, package dependencies and naming conventions and runs in the CI pipeline.

Prerequisites

Solid programming skills in TypeScript/JavaScript or Python and a basic understanding of HTTP APIs and JSON. Some experience using AI assistants in day-to-day development is helpful. In-depth Java knowledge and practical experience with Spring Boot or Jakarta EE, Maven or Gradle and Git.

Technical requirements

A laptop with Node.js or Python, Git and a code editor, plus access to at least one MCP-capable client such as Claude Code, Claude Desktop, Cursor or VS Code with Copilot.

Data protection & compliance

Java systems often run in regulated sectors: agree with information security and data protection which code may be sent to external models, and take requirements such as DORA, NIS2 or national banking IT rules into account. Generated code and new Maven dependencies should be checked for licences and known vulnerabilities and recorded in an SBOM.

Suggested dates

All dates are suggestions – your preferred date is always possible.

  • Tue, 24 November 2026 – Wed, 25 November 2026 Online Request
  • Tue, 1 December 2026 – Wed, 2 December 2026 Munich Request
  • Mon, 7 December 2026 – Tue, 8 December 2026 Online Request
  • Mon, 14 December 2026 – Tue, 15 December 2026 Stuttgart Request
  • Thu, 14 January 2027 – Fri, 15 January 2027 Online Request
  • Thu, 28 January 2027 – Fri, 29 January 2027 Berlin Request

Frequently asked questions

Why would I need my own MCP server?

Whenever AI assistants need access to internal systems such as ticketing tools, databases, documentation or line-of-business applications. Your own server defines precisely which actions and data are available and can then be reused across several clients. That avoids isolated one-off integrations and keeps access firmly under your control.

Which programming language does the course use?

You can choose between TypeScript and Python, both of which have official SDKs. The concepts are identical and all exercises are available in both versions. Developers working in other languages still benefit, because the protocol is language-agnostic and SDKs for other languages follow a similar structure.

How secure is MCP for enterprise use?

The protocol provides mechanisms for authorisation and permissions, but real-world security depends on implementation and operations. Risks such as prompt injection through tool results or over-privileged servers are genuine. We cover concrete countermeasures, approval processes for third-party servers and how to handle personal data.

Can an AI agent carry out a major Spring Boot upgrade on its own?

An agent can take on much of the mechanical work – package switches, configuration changes and iteratively fixing compile and test failures – especially when combined with OpenRewrite. Architecture decisions, functional sign-off and testing in realistic environments remain the team’s job. On the course you practise this workflow on a sample project.

Is AI-assisted coding allowed in regulated environments?

In principle yes, but with clear rules. What matters is the choice of provider and operating model, contractual commitments on data use, approval processes and traceable reviews. We discuss how banks, insurers and public authorities typically approach this and which questions you should settle with your information security team.

How much does “Model Context Protocol (MCP) for Java and Spring Developers” cost?

The course costs a flat €949 plus VAT per participant – whether online or on-site. This includes 2 training day(s) with a live trainer, course materials, a lab environment and a certificate of attendance.

Can I suggest my own date?

Yes. Our suggested dates are just a guide. In the request form you can always describe your preferred date or period in free text – we check availability and confirm within one working day.

Is the course online or on-site?

Both are possible: live online in a virtual classroom or on-site in Munich, Salzburg, Berlin, Augsburg, Hanover, Bremen, Stuttgart or Kaiserslautern. We can also run the course exclusively for your team.

More courses for Java and Spring Developers

More Model Context Protocol (MCP) courses

All 29 Model Context Protocol (MCP) courses

Model Context Protocol (MCP) · MunichModel Context Protocol (MCP) · SalzburgModel Context Protocol (MCP) · BerlinModel Context Protocol (MCP) · AugsburgModel Context Protocol (MCP) · HanoverModel Context Protocol (MCP) · BremenModel Context Protocol (MCP) · StuttgartModel Context Protocol (MCP) · KaiserslauternModel Context Protocol (MCP) · Online