모델 컨텍스트 프로토콜(MCP)은 애플리케이션이 대규모 언어 모델(LLM)과 컨텍스트를 공유하는 방식을 정의하는 개방형 표준입니다. MCP는 AI 모델을 다양한 데이터 원본 및 도구에 연결하여 보다 효과적으로 함께 작동할 수 있도록 하는 표준화된 방법을 제공합니다.
You can manage MCP server usage in your organization or enterprise by configuring MCP policies on GitHub.
The MCP servers in Copilot policy defines whether MCP servers can run at all across Copilot clients. We recommend keeping this policy enabled and, if necessary, restricting the MCP servers that users can run to an approved list.
MCP allowlists
The recommended method for creating an allowlist is to use your enterprise's managed-settings.json file. This allows you to apply settings across clients that users cannot override.
Alternatively, you can host your own MCP registry and restrict access to servers in the registry. However, this method has weaker enforcement than managed-settings.json.
| Method | Managed settings file | Custom registry |
|---|---|---|
| Release phase | Generally available | 공개 프리뷰, not prioritized for development |
| Ease of setup | You can host a configuration file on GitHub that applies automatically to clients. | You must host your own registry that matches the MCP specification and serves HTTPS requests. |
| Enforcement level | Enterprise-wide settings, overridable for enterprise teams | Enterprise-wide or for individual organizations |
| Supported clients | Clients supported by the managed-settings.json file, see Getting started with enterprise-managed settings. Planned to expand in the near future. | See MCP 프라이빗 레지스트리 적용. |
| Server matching method | Secure matching based on name, URL, or stdio commands | Less secure matching, based on name or ID only. Users can bypass the restriction by editing configuration files. |
Next steps
To configure an allowlist on GitHub, see 엔터프라이즈에 대한 MCP 서버 허용 목록 구성.