GOV-17: MCP server registry
In short: Keep a registry of every MCP server agents may connect to, with its endpoint, owner and environment, and block unlisted servers. MCP servers are the doors agents use to reach tools and data. An unregistered server is an unreviewed door into production systems.
1GOV-17
What does GOV-17 require?
Keep a registry of every MCP server agents may connect to, with its endpoint, owner and environment, and block unlisted servers.
Why does it matter?
MCP servers are the doors agents use to reach tools and data. An unregistered server is an unreviewed door into production systems.
How do you test it?
- Export the MCP server registry.
- Connect a test agent to an unlisted server and confirm it is blocked.
- Check each server entry names an owner and environment.
Which platforms document GOV-17?
Documented by NewCore.
- 9.10NewCore documentedSource: NewCore: Secure, read
- 8.35Silverfort partly documentedSource: Silverfort: AI Agent Security, read
- 7.30Astrix Security partly documentedSource: Astrix product, read
- 6.55Token Security partly documentedSource: Token Security home, read
- 6.55SailPoint Entro partly documentedSource: SailPoint agentic AI security, read
- 7.30Cyera Identity not found in public materialChecked: Oasis Agentic Access Management; Cyera completes Oasis Security acquisition, read
- 6.85Descope not found in public materialChecked: Descope Agentic Identity Hub; Descope Agentic Identity Hub 3.0, read
- 6.55Aembit not found in public materialChecked: Aembit home; Aembit IAM for Agentic AI is generally available; Aembit pricing, read
- 6.35Clutch Security not found in public materialChecked: Clutch Security platform, read
- 5.50Idira not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read
Which framework references apply?
No framework mapping is confirmed for this control yet. See the framework crosswalks for what we checked.
Which controls are related?
Glossary: mcp, mcp server registry.
Reviewed by The Register desk