Allow-list MCP servers before a company-wide rollout

Description and use

<p>Refuse any MCP server that is not on a reviewed allow-list. The agent client checks that identity before it connects, and a server that misses the list does not install. Scan shared prompt packages for hidden format-control characters, require a person to approve tools annotated destructive, and keep more than one model available.</p> <p><a href="https://chainofthought.show/guests/angie-jones/" rel="noopener noreferrer">Angie Jones</a>, then VP of Engineering for AI Tools and Enablement at Block, walked through those controls in a January 2026 episode. Her team had rolled Goose, Block's ope

Problem

<p>Refuse any MCP server that is not on a reviewed allow-list. The agent client checks that identity before it connects, and a server that misses the list does not install. Scan shared prompt packages for hidden format-control characters, require a person to approve tools annotated destructive, and keep more than one model available.</p> <p><a href="https://chainofthought.show/guests/angie-jones/" rel="noopener noreferrer">Angie Jones</a>, then VP of Engineering for AI Tools and Enablement at Block, walked through those controls in a January 2026 episode. Her team had rolled Goose, Block's ope

Outcome

<p>Refuse any MCP server that is not on a reviewed allow-list. The agent client checks that identity before it connects, and a server that misses the list does not install. Scan shared prompt packages for hidden format-control characters, require a person to approve tools annotated destructive, and keep more than one model available.</p> <p><a href="https://chainofthought.show/guests/angie-jones/" rel="noopener noreferrer">Angie Jones</a>, then VP of Engineering for AI Tools and Enablement at Block, walked through those controls in a January 2026 episode. Her team had rolled Goose, Block's ope

Evidence

Allow-list MCP servers before a company-wide rollout

Source