{"version":"2.0.22","anchor":"enterprise-mcp-server-controls","canonical_anchor":"enterprise-mcp-server-controls","heading":"Enterprise MCP Server Controls","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.0.22\/e\/enterprise-mcp-server-controls","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.0.22","markdown":"### Enterprise MCP Server Controls\n\n**What:** Enterprise administrators can now restrict which MCP servers users are allowed to enable through allowlist and blocklist configurations.\n\n**How to use:**\n\n`# Configuration stored in userSettings.json: { \"allowedMcpServers\": [{\"serverName\": \"approved-server\"}], \"deniedMcpServers\": [{\"serverName\": \"blocked-server\"}] } # When users try to add blocked servers: # Error: MCP server 'blocked-server' is not allowed by enterprise policy` **Details:**\n\n- Allowlist: Only servers in the list can be enabled (empty allowlist blocks all servers)\n- Blocklist: Explicitly blocked servers cannot be enabled regardless of allowlist\n- Priority order: blocklist > allowlist > default (allow all)\n- Enforcement applies when adding servers and when loading existing configurations\n- Applies to all scopes: enterprise, user, project, local, and plugin\n- Loaded servers automatically filtered by policy before being returned\n- **Evidence**: `eR0()` at line 280589, `y7B()` at line 280584, `Ni()` at line 280640, `YP()` at line 280843"}