What
Organizations can now enforce web search and connector isolation policies that restrict MCP connector access within sessions.
Details
- When isolation is active, affected sessions see: "Connectors are unavailable in this session under your organization's web search / connector isolation policy. Start a new session to use connectors."
- Web search similarly blocked with a parallel message
- Isolation is enforced via an isolation latch that checks against a whitelist of MCP commands
- Gated by
enforce_web_search_mcp_isolationfeature flag
Evidence
Isolation message (search for "Connectors are unavailable in this session") — d41() at line ~419266
Strings lifted out of the shipped bundle, so the claim above can be checked against them.