Skip to main content

MCP server usage in your company

You can manage MCP server usage to provide your developers with valuable tools while maintaining security and compliance.

En este artículo

El Protocolo de contexto de modelo (MCP) es un estándar abierto que define cómo las aplicaciones comparten contexto con modelos de lenguaje grandes (LLM). MCP proporciona una manera estandarizada de conectar modelos de inteligencia artificial a diferentes orígenes de datos y herramientas, lo que les permite trabajar de manera conjunta de forma más eficaz.

You can manage MCP server usage in your organization or enterprise by configuring MCP policies on GitHub.

The MCP servers in Copilot policy defines whether MCP servers can run at all across Copilot clients. We recommend keeping this policy enabled and, if necessary, restricting the MCP servers that users can run to an approved list.

MCP allowlists

The recommended method for creating an allowlist is to use your enterprise's managed-settings.json file. This allows you to apply settings across clients that users cannot override.

Alternatively, you can host your own MCP registry and restrict access to servers in the registry. However, this method has weaker enforcement than managed-settings.json.

MethodManaged settings fileCustom registry
Release phaseGenerally availableVersión preliminar pública, not prioritized for development
Ease of setupYou can host a configuration file on GitHub that applies automatically to clients.You must host your own registry that matches the MCP specification and serves HTTPS requests.
Enforcement levelEnterprise-wide settings, overridable for enterprise teamsEnterprise-wide or for individual organizations
Supported clientsClients supported by the managed-settings.json file, see Getting started with enterprise-managed settings. Planned to expand in the near future.See Cumplimiento del registro privado de MCP.
Server matching methodSecure matching based on name, URL, or stdio commandsLess secure matching, based on name or ID only. Users can bypass the restriction by editing configuration files.

Next steps

To configure an allowlist on GitHub, see Configuración de una lista de elementos permitidos para un servidor MCP en su empresa.

Further reading